Endpoint Management & Remediation Engineer

I hope you are doing well.

Please find the job details below:

Job Title:  Endpoint Management & Remediation Engineer
Location:   Washington, DC  

Requirement:
 

Client is seeking an Endpoint Management & Remediation Engineer to join our premier client’s Infrastructure Risk Remediation Team in Washington, DC. In this high-visibility role, you will serve as a vital technical contributor responsible for maintaining robust endpoint health, driving automated vulnerability remediation, and ensuring total PCI compliance across a large-scale enterprise environment. Operating at the intersection of systems engineering and cybersecurity, you will leverage Microsoft Intune, MECM/SCCM, and advanced PowerShell automation to package applications, deploy monthly security patches, and deliver precise compliance reporting across hybrid identity infrastructures.

Key Responsibilities

• Endpoint Administration: Manage and configure enterprise mobile devices and Windows endpoints using Microsoft Intune (MDM) and MECM/SCCM.
• Patch Management: Execute full lifecycle MECM/SCCM monthly security patching campaigns to eliminate system vulnerabilities across the enterprise.
• Application Packaging: Create, test, and deploy software application packages via Intune and MECM/SCCM.
• Vulnerability Remediation: Function as a key analyst on the Infrastructure Risk Remediation Team, prioritizing and remediating security gaps to maintain strict PCI compliance.
• Automation & Scripting: Write, optimize, and maintain Windows PowerShell scripts to automate administrative tasks, software deployments, and compliance fixes.
• Identity & Access Management: Administer Azure Active Directory (Microsoft Entra ID) and legacy Active Directory environments to enforce secure endpoint policies.
• Reporting & Visibility: Generate actionable asset, patch, and configuration reports using MECM/SCCM and ServiceNow (SNOW) to support risk metrics and audit readiness.

Qualifications

• 4 years of hands-on experience in enterprise systems administration focusing on Microsoft Intune, MECM/SCCM, and Active Directory / Azure AD.
• Proven track record in vulnerability remediation and maintaining strict regulatory compliance frameworks (PCI-DSS experience strongly preferred).
• Advanced proficiency in PowerShell scripting for systems management and deployment automation.
• Demonstrated expertise in application packaging, OS deployment, and enterprise patch deployment methodologies.
• Strong experience building operational reports using ServiceNow (SNOW) and MECM data streams.
• Excellent analytical, problem-solving, and cross-functional communication skills.