Endpoint Management & Remediation Engineer

Role - Endpoint Management & Remediation Engineer
Location – Washington DC

Let’s create our future together at The AES Group!

About The AES Group
The AES Group is a premier technology and engineering consulting company that has been bringing businesses and talent together for over 20 years to deliver innovative solutions that have the greatest positive impact on society. AES has helped over 40 business enterprises, including Fortune 500 companies, engage their customers, empower their employees, and transform their business operations with the power of cloud, data, AI, engineering, and other emerging technologies.
 

Position Overview
Our premier client is seeking an experienced Endpoint Management & Remediation Engineer to join its Infrastructure Risk Remediation Team in Washington, DC. This role is responsible for maintaining enterprise endpoint health, driving automated vulnerability remediation, supporting monthly security patching, and ensuring PCI-DSS compliance across a large-scale environment.

The ideal candidate will have strong hands-on experience with Microsoft Intune, MECM/SCCM, PowerShell, Active Directory, and Microsoft Entra ID, along with a proven background in endpoint security, application deployment, patch management, and compliance reporting.
 

Key Responsibilities

• Manage and administer enterprise Windows endpoints and mobile devices using Microsoft Intune and MECM/SCCM.
• Plan and execute monthly security patching campaigns using MECM/SCCM to address vulnerabilities across the enterprise.
• Package, test, deploy, and maintain enterprise applications through Microsoft Intune and MECM/SCCM.
• Identify, prioritize, and remediate endpoint vulnerabilities and security gaps in support of PCI-DSS compliance.
• Develop and maintain PowerShell scripts to automate endpoint administration, software deployment, remediation, and compliance activities.
• Administer Microsoft Entra ID (Azure AD) and Active Directory to support secure endpoint policies and identity management.
• Create and maintain asset, patch, configuration, and compliance reports using MECM/SCCM and ServiceNow (SNOW).
• Support risk metrics, audit readiness, and remediation tracking through accurate and actionable reporting.
• Collaborate with infrastructure, cybersecurity, and other technical teams to resolve endpoint and compliance issues.
   

Required Qualifications

• 4+ years of hands-on experience in enterprise systems or endpoint administration.
• Strong experience with Microsoft Intune and MECM/SCCM.
• Strong knowledge of Active Directory and Microsoft Entra ID (Azure AD).
• Proven experience with vulnerability remediation, endpoint security, and patch management.
• Advanced PowerShell scripting skills for automation and systems management.
• Experience with application packaging, software deployment, and Windows OS deployment.
• Experience creating operational and compliance reports using MECM/SCCM and ServiceNow.
• Experience working with PCI-DSS or similar regulatory/compliance frameworks is highly preferred.
• Strong analytical, troubleshooting, communication, and cross-functional collaboration skills.