Endpoint Engineer (Software/Patch)

Job Summary: Endpoint Engineer (Software/Patch), Richmond, VA (Hybrid) Engineer, package, modify, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints. Develop and maintain deployment packages using Microsoft Intune, MECM/ClientM, or similar endpoint management tools. Automate software deployment workflows for efficiency and scalability. Perform compatibility testing and configuration adjustments for diverse device profiles. Support patch management: test, schedule, deploy, and validate OS and third-party updates. Review and analyze endpoint vulnerability metrics (Rapid7, Qualys, Tenable, Defender for Endpoint) and remediate risks through targeted deployments. Troubleshoot deployment failures, patching issues, and configuration problems, providing root-cause analysis and corrective actions. Collaborate with application owners and security teams on update requirements, dependencies, and risk evaluation. Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management. Implement and enforce endpoint hardening, compliance, and configuration baselines. Partner with infrastructure, security, and service desk teams to ensure endpoint reliability, security, and user satisfaction. Continuously evaluate and recommend new technologies, updates, and automation to optimize endpoint management. Provide exceptional customer service, working both independently and as part of a team.Required Skills 5+ years experience with Windows 11 OS, Microsoft Office 365, and endpoint management systems. Proficient with workstation imaging solutions and service management ticketing systems. Strong analytical, troubleshooting, and problem-solving abilities. Excellent communication skills (verbal and written). Ability to interact effectively with end users, technical staff, and senior staff. Experience with Microsoft Intune, Autopilot, and Microsoft GraphAPI.Desired Skills Experience with PatchMyPC, ServiceNow, and PowerShell.