Job Description: IT Security Analyst 3 – Endpoint Engineer (Software/Patch)

Location: Richmond, VA – Hybrid (Onsite Tuesday, Wednesday, and Thursday)

Job Summary

Seeking an experienced Endpoint Engineer to manage enterprise software packaging, deployment, patch management, and endpoint vulnerability remediation. The ideal candidate will have hands-on experience with Microsoft Intune, MECM/SCCM, endpoint security tools, and deployment automation.

Key Responsibilities

• Package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints.

• Develop and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or similar tools.

• Manage OS and third-party software patching, including testing, scheduling, deployment, and validation.

• Analyze vulnerability reports and remediate endpoint vulnerabilities using tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.

• Troubleshoot deployment failures, patching issues, and configuration problems; perform root-cause analysis.

• Automate software deployment and patch management workflows using scripting and automation tools.

• Implement endpoint hardening, security compliance policies, and configuration baselines.

• Collaborate with security, infrastructure, application, and service desk teams.

• Maintain technical documentation and follow change management procedures.

Required Skills

• Microsoft Intune

• MECM/SCCM (Microsoft Endpoint Configuration Manager)

• Enterprise software packaging and deployment

• Windows endpoint management and patch management

• Vulnerability assessment and remediation

• PowerShell scripting and deployment automation

• Endpoint security and configuration management

• Troubleshooting and root-cause analysis

• Change management and technical documentation

Preferred Skills

• Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint

• Windows endpoint hardening and security baselines

• Third-party application patching

• Enterprise vulnerability remediation and compliance management

Work Arrangement

Hybrid role requiring onsite presence three days per week: Tuesday, Wednesday, and Thursday, in Richmond, Virginia. Contractor parking is not provided.