IT Security Analyst 3 - Endpoint Engineer (Software/Patch) - hybrid Richmond, VA
About The Position
The State Corporation Commission (SCC) is seeking an Endpoint Engineer to support enterprise software and patch deployment activities. The role reviews endpoint vulnerability metrics and carries out remediation through targeted software and patch deployments. It troubleshoots deployment failures, patching issues, and configuration problems, providing root-cause analysis and corrective actions. The position also helps maintain a secure, compliant, and reliable endpoint environment across the organization. The engineer packages, tests, automates, deploys, and validates commercial software and updates across enterprise endpoints. The role works with application owners, security teams, infrastructure teams, and service desk staff to manage software requirements, update risks, endpoint security, reliability, and user satisfaction. It also maintains deployment and configuration documentation and evaluates technologies and automation opportunities to improve endpoint management operations.
Requirements
- At least 4 years of experience and proficiency with Windows 11 operating systems and monthly/annual updates.
- At least 4 years of experience and proficiency with Microsoft Office 365 applications and monthly updates.
- At least 4 years of experience and proficiency using an endpoint management system.
- At least 4 years of experience and proficiency using a workstation imaging solution.
- At least 4 years of experience and proficiency using a service management ticketing system.
- At least 4 years of proven analytical and problem-solving abilities.
- At least 4 years of excellent verbal and written communication skills.
- At least 4 years of ability to work independently with minimal direction and as part of a team.
- At least 4 years of ability to work effectively with end users, technical staff, and senior staff while providing exceptional customer service.
Nice To Haves
- 4 years of experience with Microsoft Intune and Autopilot.
- 4 years of experience with Microsoft GraphAPI.
- 4 years of experience with PatchMyPC.
- 4 years of experience with ServiceNow.
- 4 years of experience with PowerShell.
Responsibilities
- Engineer, modify, package, and deploy commercial off-the-shelf software across enterprise endpoint environments.
- Develop and maintain deployment packages using Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms.
- Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
- Automate software deployment workflows to improve efficiency, consistency, and scalability.
- Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
- Support enterprise patch management processes, including testing, scheduling, deploying, and validating operating system and third-party updates.
- Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Defender for Endpoint, and assist in prioritizing and remediating endpoint-related risks.
- Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
- Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
- Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
- Partner with infrastructure, security, and service desk teams to ensure endpoint reliability, security posture, and user satisfaction.
- Continuously evaluate technologies, updates, and automation opportunities to optimize endpoint management operations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
