Enter a job title or keyword
Windows Endpoint Engineer
Job Location:
Job Location:
Pittsburgh, PA - USA
Hourly Salary:
USD 45 - 48
Hourly Salary:
Posted:
1 October 2026 (2 days ago)
Posted:
Application Deadline:
29 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Overview
Client is seeking a Windows Client Engineer to manage and modernize its Windows endpoint environment through Microsoft Intune and SCCM (Configuration Manager) with a primary focus on reducing vulnerability risk. This hands-on role partners closely with security teams to analyze vulnerability findings develop remediation solutions and deploy fixes across the enterprise.
The ideal candidate will have strong experience with Windows endpoint administration endpoint vulnerability remediation PowerShell scripting and enterprise device management technologies. Success in this role requires the ability to investigate vulnerabilities implement scalable fixes and ensure compliance without disrupting end users.
Core Responsibilities
Review vulnerabilities identified through Tenable tools and manage the endpoint remediation process from investigation through closure.
Build test package and deploy remediation solutions using Microsoft Intune and SCCM including patches application updates configuration changes registry modifications and scripted fixes.
Author and maintain PowerShell scripts for automation detection and remediation including Intune proactive remediations and SCCM configuration items.
Package and deploy third-party application updates through Intune SCCM or patch management tools.
Manage Windows Update policies and patching processes using Windows Update for Business WSUS or SCCM software updates.
Partner with vulnerability management and security teams to triage findings validate remediation effectiveness and identify false positives.
Track remediation progress and provide reporting on compliance patch coverage and outstanding risks against established service levels.
Maintain Windows configuration baselines and security hardening standards across endpoint devices.
Support co-management device onboarding compliance policies and conditional access initiatives within the endpoint management environment.
Document remediation procedures and contribute to standardized well-tested deployment practices.
Essential Qualifications Skills and Technologies
Bachelors degree or higher.
3 to 5 years of experience engineering and administering Windows endpoints in an enterprise environment.
Proficiency with Microsoft Windows Client and Server operating systems.
Hands-on experience with Microsoft Intune and SCCM/Configuration Manager including application packaging and deployment.
Strong PowerShell scripting skills for automation detection and remediation.
Experience with Windows patch management using Windows Update for Business WSUS or SCCM software updates.
Experience performing endpoint and vulnerability remediation including investigating findings and implementing corrective actions.
Familiarity with vulnerability management concepts and tools with Tenable experience strongly preferred and comparable platforms such as Qualys or Rapid7 considered relevant.
Understanding of CVEs CVSS scoring and translating vulnerability findings into remediation activities.
Knowledge of Windows operating systems Active Directory Group Policy and Entra ID (Azure AD).
Ability to carefully test validate and deploy changes while minimizing impact to end users.
Demonstrated ability to work independently and proactively drive vulnerability investigation and remediation efforts.
Preferred Skills or Experience
Experience with application packaging tools such as PSADT PatchMyPC MSI or MSIX.
Exposure to Microsoft Defender for Endpoint and Threat & Vulnerability Management integration.
Knowledge of security hardening frameworks including CIS Benchmarks and DISA STIGs.
Relevant certifications such as Microsoft MD-102 SC-200 or CompTIA Security.
Work Details
Contract position.
First shift schedule: Monday through Friday 8:00 AM to 5:00 PM.
Interview required; an onsite visit is preferred but flexible.
Nesco Resource offers a comprehensive benefits package for our associates which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical Vision Dental 401K and EAP (Employee Assistance Program) services.
Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws.
Client is seeking a Windows Client Engineer to manage and modernize its Windows endpoint environment through Microsoft Intune and SCCM (Configuration Manager) with a primary focus on reducing vulnerability risk. This hands-on role partners closely with security teams to analyze vulnerability findings develop remediation solutions and deploy fixes across the enterprise.
The ideal candidate will have strong experience with Windows endpoint administration endpoint vulnerability remediation PowerShell scripting and enterprise device management technologies. Success in this role requires the ability to investigate vulnerabilities implement scalable fixes and ensure compliance without disrupting end users.
Core Responsibilities
Review vulnerabilities identified through Tenable tools and manage the endpoint remediation process from investigation through closure.
Build test package and deploy remediation solutions using Microsoft Intune and SCCM including patches application updates configuration changes registry modifications and scripted fixes.
Author and maintain PowerShell scripts for automation detection and remediation including Intune proactive remediations and SCCM configuration items.
Package and deploy third-party application updates through Intune SCCM or patch management tools.
Manage Windows Update policies and patching processes using Windows Update for Business WSUS or SCCM software updates.
Partner with vulnerability management and security teams to triage findings validate remediation effectiveness and identify false positives.
Track remediation progress and provide reporting on compliance patch coverage and outstanding risks against established service levels.
Maintain Windows configuration baselines and security hardening standards across endpoint devices.
Support co-management device onboarding compliance policies and conditional access initiatives within the endpoint management environment.
Document remediation procedures and contribute to standardized well-tested deployment practices.
Essential Qualifications Skills and Technologies
Bachelors degree or higher.
3 to 5 years of experience engineering and administering Windows endpoints in an enterprise environment.
Proficiency with Microsoft Windows Client and Server operating systems.
Hands-on experience with Microsoft Intune and SCCM/Configuration Manager including application packaging and deployment.
Strong PowerShell scripting skills for automation detection and remediation.
Experience with Windows patch management using Windows Update for Business WSUS or SCCM software updates.
Experience performing endpoint and vulnerability remediation including investigating findings and implementing corrective actions.
Familiarity with vulnerability management concepts and tools with Tenable experience strongly preferred and comparable platforms such as Qualys or Rapid7 considered relevant.
Understanding of CVEs CVSS scoring and translating vulnerability findings into remediation activities.
Knowledge of Windows operating systems Active Directory Group Policy and Entra ID (Azure AD).
Ability to carefully test validate and deploy changes while minimizing impact to end users.
Demonstrated ability to work independently and proactively drive vulnerability investigation and remediation efforts.
Preferred Skills or Experience
Experience with application packaging tools such as PSADT PatchMyPC MSI or MSIX.
Exposure to Microsoft Defender for Endpoint and Threat & Vulnerability Management integration.
Knowledge of security hardening frameworks including CIS Benchmarks and DISA STIGs.
Relevant certifications such as Microsoft MD-102 SC-200 or CompTIA Security.
Work Details
Contract position.
First shift schedule: Monday through Friday 8:00 AM to 5:00 PM.
Interview required; an onsite visit is preferred but flexible.
Nesco Resource offers a comprehensive benefits package for our associates which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical Vision Dental 401K and EAP (Employee Assistance Program) services.
Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race color religion age sex national origin disability status genetics protected veteran status sexual orientation gender identity or expression or any other characteristic protected by federal state or local laws.
Required Experience:
IC
