Windows System Engineer

Job Description: Job DescriptionBuild, test, and deploy remediation solutions using Intune and SCCM, including application updates, patches, registry/configuration changes, and scripted fixesDevelop and maintain PowerShell scripts for automation, detection, and remediationBuild detection and remediation logic for Intune proactive remediations and SCCM configuration itemsPackage and deploy third-party application updates using tools such as Intune Win32 apps, SCCM application deployments, and Patch My PCManage Windows patching through Windows Update for Business, WSUS, and SCCM software update groupsPartner with the security/vulnerability management team to triage findings, validate remediation, and identify potential false positivesTrack remediation progress and report on patch compliance, coverage, outstanding vulnerabilities, and SLAsMaintain Windows configuration baselines and security hardening standards, including CIS and DISA STIG alignmentSupport Intune/SCCM co-management, device onboarding, compliance policies, and Conditional AccessDocument remediation processes and establish repeatable, well-tested deployment procedures that minimize impact to production usersRequired Qualifications 2+ years of relevant Windows endpoint engineering experience when meeting the degree requirements, or 4+ years of relevant experience without a degreeStrong knowledge of Microsoft Windows Client/Server operating systemsHands-on experience with Microsoft Intune and SCCM/Configuration ManagerExperience with application packaging and deploymentStrong PowerShell scripting skills for automation, detection, and remediationExperience with Windows patch management using Windows Update for Business, WSUS, SCCM, or similar technologiesKnowledge of Active Directory, Group Policy, and Entra ID/Azure AD