IT Security Analyst - Endpoint Engineer

About us:

Creative Information Technology Inc (CITI) is an esteemed IT enterprise renowned for its exceptional customer service and innovation. We serve both government and commercial sectors, offering a range of solutions such as Healthcare IT, Human Services, Identity Credentialing, Cloud Computing, and Big Data Analytics. With clients in the US and abroad, we hold key contract vehicles including GSA IT Schedule 70, NIH CIO-SP3, GSA Alliant, and DHS-Eagle II.

Join us in driving growth and seizing new business opportunities!

Position Description:

Client: VITA - Virginia Information Technology Agency

Location: Hybrid (Richmond, VA)

Employment Type: Long-term contract

Job Summary:

The State Corporation Commission (SCC) is seeking an Endpoint Engineer to support enterprise software and patch deployment activities. This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments. The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed rootcause analysis and corrective actions. Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

• Engineer, modify, package, and deploy commercial offtheshelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and thirdparty updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Required Skills

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates – 4 years
• Experience and proficiency with Microsoft Office 365 applications and monthly updates – 4 years
• Experience and proficiency using an Endpoint Management System – 4 years
• Experience and proficiency using a Workstation Imaging Solution – 4 years
• Experience and proficiency using a Service Management Ticketing System – 4 years
• Proven analytical and problem-solving abilities – 4 years
• Excellent verbal and written communication skills – 4 years
• Ability to work independently with minimal direction and as part of a team – 4 years
• Ability to work effectively with end users, technical staff, and senior staff while providing exceptional customer service – 4 years

Desired Skills

• Experience with Microsoft Intune and Autopilot – 4 years
• Experience with Microsoft Graph API – 4 years
• Experience with Patch My PC – 4 years
• Experience with ServiceNow – 4 years
• Experience with PowerShell – 4 years