Systems/Vulnerability Engineer

Position Overview We are seeking an experienced Endpoint Engineer to take ownership of our Windows client environment. In this role, you will focus heavily on enterprise system administration, automated application deployment, client health management, and endpoint vulnerability remediation.

Key Responsibilities

• SCCM Administration & Deployment: Design, create, and maintain application packages, updates, and custom task sequences using Microsoft SCCM/MECM.

• Client Health & Remediation: Monitor, diagnose, and resolve SCCM client health issues across the fleet to maintain optimal compliance and deployment success rates.

• Scripting & Automation: Utilize advanced PowerShell (including Remote PowerShell) to automate administrative tasks, develop custom remediation tools, and streamline system management.

• Vulnerability Management: Collaborate with security teams to identify, prioritize, and execute vulnerability remediation processes (experience with Tenable preferred, or Microsoft Defender).

Required Qualifications

• Advanced experience with SCCM/MECM application packaging, deployment, and task sequence configuration.

• Strong proficiency in PowerShell scripting, including RemotePS, for endpoint automation and troubleshooting.

• Demonstrated experience with enterprise vulnerability management and endpoint remediation platforms (Tenable preferred).

• Deep technical understanding of the Windows OS client ecosystem.

Preferred / Nice-to-Have Skills

• Exposure to modern End User Computing (EUC) technologies, such as Azure Virtual Desktop (AVD).

• Familiarity with Digital Experience Monitoring (DEM) tools.

• Understanding of Secure Enterprise Browsing solutions and modern Endpoint Management frameworks.