Endpoint Engineer (Software/Patch)

Nexiva•Richmond, VA

1d•Hybrid

About The Position

The Endpoint Engineer supports enterprise software and patch deployment activities. The role reviews endpoint vulnerability metrics and remediates identified risks through targeted software and patch deployments. It also troubleshoots deployment failures, patching issues, and configuration problems, providing root-cause analysis and corrective actions. The position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization. The position is based in Richmond, Virginia, with a hybrid work arrangement. Local candidates are required, and the interview is in person. The client is VITA, and the stated rate is $75 per hour C2C. The posting specifies that only Green Card holders and U.S. citizens are eligible.

Requirements

Four years of experience and proficiency with Windows 11 operating systems and monthly and annual updates.
Four years of experience and proficiency with Microsoft Office 365 applications and monthly updates.
Four years of experience and proficiency using an endpoint management system.
Four years of experience and proficiency using a workstation imaging solution.
Four years of experience and proficiency using a service management ticketing system.
Four years of proven analytical and problem-solving ability.
Four years of excellent verbal and written communication skills.
Ability to work independently with minimal direction and as part of a team.
Ability to work effectively with end users, technical staff, and senior staff while providing excellent customer service.
Local candidate from Richmond, Virginia.
Eligible for the stated client requirement: U.S. citizen or Green Card holder.

Nice To Haves

Four years of experience with Microsoft Intune and Autopilot.
Four years of experience with Microsoft Graph API.
Four years of experience with Patch My PC.
Four years of experience with ServiceNow.
Four years of experience with PowerShell.

Responsibilities

Engineer, modify, package, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments.
Develop and maintain deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/Client), or similar endpoint management platforms.
Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
Automate software deployment workflows to improve efficiency, consistency, and scalability.
Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
Support enterprise patch management, including testing, scheduling, deploying, and validating operating system and third-party updates.
Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Defender for Endpoint, and assist in prioritizing and remediating endpoint-related risks.
Troubleshoot deployment failures, patching issues, and endpoint configuration problems, and provide root-cause analysis and corrective actions.
Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
Partner with infrastructure, security, and service desk teams to support endpoint reliability, security posture, and user satisfaction.
Evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.