Endpoint Security Engineer

MasterApp Labs•Richmond, VA

3d•Hybrid

About The Position

The Endpoint Security Engineer engineers, modifies, packages, and deploys commercial off-the-shelf software across enterprise endpoint environments. The role develops and maintains deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms, and performs compatibility testing and configuration adjustments to support reliable installation and operation across diverse device profiles. The position supports enterprise patch management, endpoint vulnerability remediation, endpoint hardening, and configuration compliance. It troubleshoots deployment, patching, and configuration problems; documents packaging standards and operational procedures; and partners with application owners, infrastructure, security, and service desk teams to maintain endpoint reliability, security, and user satisfaction. The position is a hybrid contract role based in Richmond, Virginia, with three on-site days per week: Tuesday, Wednesday, and Thursday.

Requirements

Experience and proficiency with Windows 11 operating systems and monthly/annual updates (listed as 4 years).
Experience and proficiency with Microsoft Office 365 applications and monthly updates (listed as 4 years).
Experience and proficiency using an endpoint management system (listed as 4 years).
Experience and proficiency using a workstation imaging solution (listed as 4 years).
Experience and proficiency using a service management ticketing system (listed as 4 years).
Proven analytical and problem-solving abilities (listed as 4 years).
Excellent verbal and written communication skills (listed as 4 years).
Ability to work independently with minimal direction and as part of a team (listed as 4 years).
Ability to work effectively with end users, technical staff, and senior staff while providing exceptional customer service (listed as 4 years).

Nice To Haves

Experience with Microsoft Intune and Autopilot (listed as 4 years).
Experience with Microsoft Graph API (listed as 4 years).
Experience with PatchMyPC (listed as 4 years).
Experience with ServiceNow (listed as 4 years).
Experience with PowerShell (listed as 4 years).

Responsibilities

Engineer, modify, package, and deploy commercial off-the-shelf software across enterprise endpoint environments.
Develop and maintain software deployment packages using Microsoft Intune, MECM/SCCM, or similar endpoint management platforms.
Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
Automate software deployment workflows to improve efficiency, consistency, and scalability.
Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
Support enterprise patch management, including testing, scheduling, deploying, and validating operating system and third-party updates.
Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Defender for Endpoint, and assist with prioritizing and remediating endpoint-related risks.
Troubleshoot deployment failures, patching issues, and endpoint configuration problems; provide root-cause analysis and corrective actions.
Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
Partner with infrastructure, security, and service desk teams to support endpoint reliability, security posture, and user satisfaction.
Evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.