Sr Endpoint Mgt Engineer

Senior Endpoint Management Engineer (KACE / BigFix / Application Packaging)

Location

Fairmont, WV (onsite)

Citizenship

U.S. citizen required

Overview

We need a senior endpoint engineer onsite in Fairmont, WV to own application packaging and endpoint management for a federal customer. The job blends hands-on packaging, Quest KACE and HCL BigFix administration, and SharePoint/Power Automate support, along with technical direction for the other developers on the team.

Patching, Security and Compliance

• Check system and patch compliance every day so critical security fixes stay current.
• Watch SOC vulnerability mitigation notices and carry out the required remediation.
• Join the bi-weekly BigFix meetings to stay ahead of platform changes.

Application Packaging

• Keep 100+ applications running on customer workstations and VDI.
• Turn .exe installers and legacy installs into clean MSI packages that install silently, using capture tools such as Repackager.
• Build, edit and tune MSI packages and MST transforms from vendor media or older installs.
• Work MSI databases at the table level in AdminStudio to clear Internal Consistency Errors (ICEs).
• Write PowerShell and VBScript custom actions for difficult configuration or registry changes.
• Track down install failures through log analysis, fix file and registry conflicts, and test on clean virtual machines.

HCL BigFix

• Write and test Fixlets and tasks for custom software deployments.
• Maintain the BigFix environment, including core servers, relays and the database layer.
• Keep third-party applications patched to reduce security exposure.
• Watch platform health and tune the relay hierarchy to use bandwidth well.
• Diagnose agent connectivity problems and clear failed deployments fast.
• Build detailed compliance reporting for leadership and auditors.

Quest KACE SMA

• Run, update and maintain physical and virtual KACE SMA appliances.
• Build Smart Labels with advanced filters and LDAP queries to aim updates at specific groups, offices or device types.
• Own the KACE Agent on networked devices from rollout through troubleshooting.
• Create Verify and Remediation logic that fixes endpoint compliance problems on its own.
• Package, test and push applications and scripts remotely (KScripts, PowerShell, VBScript, Shell).
• Run discovery scans for hardware, peripheral and software inventory.
• Use the software catalog for usage tracking, license reconciliation and compliance audits.
• Write custom SQL and wizard reports covering hardware lifecycle, patch levels and software compliance.
• Set up and refine KACE Service Desk queues, ticket workflows and knowledge base content.

SharePoint and Power Automate

• Build and support the Power Automate flows that run internal IT processes.
• Administer the IT SharePoint site: libraries, lists, metadata columns and item-level permissions.
• Tie SharePoint and Power Automate into Power Apps and outside REST APIs.
• Review flow run history and fix integration failures.

Engineering and Team Lead

• Assign, guide and review work for the other developers on the team.
• Design new software products or major upgrades to existing ones.
• Troubleshoot production application problems.
• Research, test and build integrations or conversions of new products to meet customer needs.
• Work through integration, compatibility and cross-platform issues.
• Define application requirements with project teams and end users, and assess the feasibility of future work for management.
• Evaluate and recommend application packages along with integration and test tools.
• Fix reported software issues and act on improvement requests.
• Contribute to user manuals.

What You Bring

• 12+ years of relevant experience and a bachelor's degree
• 5+ years focused on Windows application packaging and software distribution, with strong Flexera AdminStudio skills
• 3+ years administering the Quest KACE SMA (K1000) Administrator Console, plus BigFix administration
• 3+ years each of PowerShell/VBScript, web application development and support, and Power Automate workflow work
• Strong scripting in PowerShell, VBScript or Bash to back custom KScripts
• Custom Relevance queries for targeting and filtering, and BigFix Action Scripts for automation and configuration
• Deep admin knowledge of Windows Server and client, Active Directory and Group Policy
• Core networking: TCP/IP, DNS, DHCP
• Basic MS SQL Server administration as it applies to BigFix
• Sharp analytical skills and a disciplined approach to change management
• Ability to set priorities for your own work and the team's without close supervision
• Strong customer service and clear written and verbal communication at all levels

Nice to Have

• Enterprise-scale tuning of Quest KACE SMA and HCL BigFix
• Advanced AdminStudio work on complex packages
• SharePoint Online and Microsoft Power Automate configuration
• Solving hard application errors on both legacy and current Windows platforms
• Strong technical writing

Additional Requirements

• Onsite in Fairmont, WV
• Able to obtain and keep a Public Trust or higher, including an SF-85 background investigation
• Must pass drug and alcohol testing required by the customer contract
• U.S. citizenship