Windows Engineer

• Build, test, and deploy remediation solutions using Intune and SCCM, including application updates, patches, registry/configuration changes, and scripted fixes
• Develop and maintain PowerShell scripts for automation, detection, and remediation
• Build detection and remediation logic for Intune proactive remediations and SCCM configuration items
• Package and deploy third-party application updates using tools such as Intune Win32 apps, SCCM application deployments, and Patch My PC
• Manage Windows patching through Windows Update for Business, WSUS, and SCCM software update groups
• Partner with the security/vulnerability management team to triage findings, validate remediation, and identify potential false positives
• Track remediation progress and report on patch compliance, coverage, outstanding vulnerabilities, and SLAs
• Maintain Windows configuration baselines and security hardening standards, including CIS and DISA STIG alignment
• Support Intune/SCCM co-management, device onboarding, compliance policies, and Conditional Access
• Document remediation processes and establish repeatable, well-tested deployment procedures that minimize impact to production users

Required Qualifications

• 2+ years of relevant Windows endpoint engineering experience when meeting the degree requirements, or 4+ years of relevant experience without a degree
• Strong knowledge of Microsoft Windows Client/Server operating systems
• Hands-on experience with Microsoft Intune and SCCM/Configuration Manager
• Experience with application packaging and deployment
• Strong PowerShell scripting skills for automation, detection, and remediation
• Experience with Windows patch management using Windows Update for Business, WSUS, SCCM, or similar technologies
• Knowledge of Active Directory, Group Policy, and Entra ID/Azure AD