SCC - IT Security Analyst 3 - Endpoint Engineer (Software/Patch) (814050)/Hybrid

SCC - IT Security Analyst 3 - Endpoint Engineer (Software/Patch) (814050)/Hybrid

Richmond, VA

Duration: Long term

ABOUT THE ROLE

The State Corporation Commission (SCC) is seeking an Endpoint Engineer to support enterprise software and patch deployment activities. This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments. The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root‑cause analysis and corrective actions. Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

Responsibilities Include:

•    Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.

•    Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.

•    Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.

•    Automate software deployment workflows to improve efficiency, consistency, and scalability.

•    Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.

•    Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.

•    Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.

•    Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.

•    Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.

•    Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.

•    Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.

•    Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Skill   

Required / Desired

Amount       

of Experience

Experience and proficiency with Windows 11 operating systems and monthly/annual updates

Required

4

Years

Experience and proficiency with Microsoft Office 365 applications and monthly updates

Required

4

Years

Experience and proficiency using an Endpoint Management System

Required

4

Years

Experience and proficiency using a Workstation Imaging Solution

Required

4

Years

Experience and proficiency using a Service Management Ticketing System

Required

4

Years

Proven analytical and problem-solving abilities

Required

4

Years

Excellent verbal and written communication skills

Required

4

Years

Ability to work independently with minimal direction and as a team

Required

4

Years

Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service

Required

4

Years

Experience with Microsoft InTune and Autopilot

Desired

4

Years

Experience with Microsoft GraphAPI

Desired

4

Years

Experience with PatchMyPC

Desired

4

Years

Experience with ServiceNow

Desired

4

Years

Experience with PowerShell

Desired

4

Years

Global Candidate Requirements

Skill   

Required / Desired

Amount       

of Experience

Questions

Description

Question 1

Commonwealth of Virginia security policies prohibit the use of offshore IT contractors. Do you attest to the fact that your candidate will physically reside within the US for the duration of the assignment?

Question 2

What is your candidate’s email address?

Question 3

In what city and state does your candidate CURRENTLY reside? Local Richmond candidates are preferred due to the weekly on site requirements.

Question 4

This role requires that this candidate be ON SITE to include Tuesday, Wednesday, & Thursday each week. Parking is NOT provided for contractors. If selected, does your candidate agree to this arrangement?

Question 5

Pls note: If your candidate was forwarded for consideration under the original req SCC - Vulnerability Management Analyst (813431) the manager reviewed and determined they were NOT a fit. Pls do not submit them to this updated role.