Endpoint Engineer

Job Category: Cybersecurity / Endpoint Engineering / IT Infrastructure

Industry: Government / Public Sector IT

Work Arrangement: Hybrid — Onsite Tuesday, Wednesday, and Thursday

Work Schedule: Three onsite days per week

Job Reference: 814050

We are seeking an experienced Endpoint Engineer with hands‑on expertise in enterprise software deployment, patch management, and endpoint vulnerability remediation
. This role focuses on maintaining secure, compliant, and reliable endpoint environments by deploying software, managing operating system and third‑party patches, troubleshooting deployment failures, and addressing endpoint security risks.

The ideal candidate will have practical experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), software packaging, vulnerability assessment tools, and endpoint security configuration. Candidates should be comfortable working with security, infrastructure, application, and service desk teams to resolve technical issues and improve endpoint management operations.

• Package, configure, test, and deploy commercial off-the-shelf (COTS) applications across enterprise endpoint environments.
• Create and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or comparable endpoint management platforms.
• Perform application compatibility testing, installation validation, and configuration adjustments across different endpoint configurations.
• Manage endpoint patching activities, including patch testing, deployment scheduling, implementation, and post‑deployment validation.
• Review endpoint vulnerability findings and coordinate remediation through software updates, security patches, and configuration changes.
• Analyze vulnerability reports generated by Rapid7, Qualys, Tenable, Microsoft Defender for Endpoint, and similar security tools.
• Troubleshoot application installation failures, unsuccessful patch deployments, configuration conflicts, and endpoint compliance issues.
• Conduct root‑cause analysis and implement corrective actions to prevent recurring deployment and patching problems.
• Develop automation for software packaging, deployment, patching, and routine endpoint management tasks.
• Implement endpoint hardening standards, security configuration policies, and compliance baselines.

This position requires onsite work on Tuesday, Wednesday, and Thursday
, with the remaining work arrangement subject to the engagement’s requirements. Contractors must arrange their own parking.

Candidates should have hands‑on endpoint engineering experience rather than vulnerability scanning experience alone. The primary focus is software packaging, enterprise deployment, patch execution, and endpoint remediation
.

Analytical troubleshooting and structured problem‑solving.

Clear technical documentation and communication.

Collaboration across cybersecurity and IT infrastructure teams.

Attention to detail and a strong security‑focused mindset.

Ability to identify recurring technical issues and implement lasting solutions.

Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.

Power Shell scripting or comparable automation techniques for endpoint administration.

Endpoint hardening and security baseline implementation.

Application compatibility testing and deployment troubleshooting.

IT change management, technical documentation, and patch compliance reporting.

Hands‑on experience with enterprise endpoint management and software deployment.

Experience packaging, testing, deploying, and troubleshooting Windows applications.

Practical knowledge of Microsoft…