Endpoint Engineer (Software/Patch) - VA local

Nexiva•Richmond, VA

1d•Hybrid

About The Position

The Endpoint Engineer supports enterprise software and patch deployment activities. The role reviews endpoint vulnerability metrics and remediates issues through targeted software and patch deployments. It also troubleshoots deployment failures, patching issues, and configuration problems, providing root-cause analysis and corrective actions. The position helps maintain a secure, compliant, and reliable endpoint environment across the organization.

Requirements

Four years of experience and proficiency with Windows 11 operating systems and monthly and annual updates.
Four years of experience and proficiency with Microsoft Office 365 applications and monthly updates.
Four years of experience and proficiency using an endpoint management system.
Four years of experience and proficiency using a workstation imaging solution.
Four years of experience and proficiency using a service management ticketing system.
Four years of proven analytical and problem-solving abilities.
Four years of excellent verbal and written communication skills.
Four years of ability to work independently with minimal direction and as part of a team.
Four years of ability to work effectively with end users, technical staff, and senior staff while providing exceptional customer service.

Nice To Haves

Four years of experience with Microsoft Intune and Autopilot.
Four years of experience with Microsoft Graph API.
Four years of experience with PatchMyPC.
Four years of experience with ServiceNow.
Four years of experience with PowerShell.

Responsibilities

Engineer, modify, package, and deploy commercial off-the-shelf software across enterprise endpoint environments.
Develop and maintain deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/Client), or similar endpoint management platforms.
Perform compatibility testing and configuration adjustments to support reliable software installation and operation across diverse device profiles.
Automate software deployment workflows to improve efficiency, consistency, and scalability.
Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
Support enterprise patch management, including testing, scheduling, deploying, and validating operating system and third-party updates.
Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Defender for Endpoint, and assist in prioritizing and remediating endpoint-related risks.
Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
Partner with infrastructure, security, and service desk teams to support endpoint reliability, security posture, and user satisfaction.
Evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.