Windows Client Engineer - Onsite

Requirements:

• Bachelors degree or higher
• 3–5+ years of experience engineering and administering Windows endpoints in an enterprise environment
• Hands-on experience with Microsoft Intune and SCCM/Configuration Manager, including application packaging and deployment
• Strong PowerShell scripting skills for automation, detection, and remediation
• Experience with Windows patch management using Windows Update for Business, WSUS, or SCCM software updates
• Familiarity with vulnerability management concepts and tools; Tenable experience is strongly preferred
• Understanding of CVEs, CVSS scoring, and how vulnerability findings translate into remediation actions
• Solid knowledge of Windows OS internals, Active Directory, Group Policy, and Entra ID (Azure AD)
• Ability to test changes carefully and deploy fixes without disrupting end users
• Desired: Experience with application packaging tools such as PSADT and PatchMyPC, and MSI/MSIX
• Desired: Exposure to Microsoft Defender for Endpoint and its vulnerability management (TVM) integration
• Desired: Knowledge of security hardening frameworks such as CIS Benchmarks and DISA STIGs
• Desired: Relevant certifications such as Microsoft MD-102, SC-200, or CompTIA Security+
• Must be available and ready to work directly as a Genesis10 employee

Responsibilities:

• Review outstanding Tenable vulnerabilities and lead endpoint remediation workflows
• Build, test, and deploy remediation packages and solutions using Intune and SCCM
• Write and maintain PowerShell remediation scripts, including detection and remediation logic
• Package and deploy third-party application updates outside standard Microsoft patching
• Manage Windows Update policies through Windows Update for Business, WSUS, or SCCM software update groups
• Partner with the security and vulnerability management teams to triage findings and validate fixes
• Track remediation progress and report compliance, patch coverage, and outstanding risk against SLAs
• Maintain configuration baselines and security hardening across the Windows client fleet
• Support co-management, device onboarding, compliance policies, and conditional access
• Document remediation procedures and contribute to a repeatable, well-tested deployment process

Technologies:

• Active Directory
• Azure
• Support
• Microsoft Intune
• Network
• PowerShell
• Security
• Windows
• Cloud
• DevOps

More

We are hiring a hands-on Windows Client Engineer for a 12+ month contract with a global manufacturing company in Pittsburgh, Pennsylvania. The role focuses on modernizing and managing the Windows endpoint environment while reducing vulnerability risk, in close partnership with the security team. Compensation is $38–$48 per hour on W-2, based on qualifications. Genesis10 is a staffing firm serving clients across the United States in contract, contract-to-hire, and permanent placement roles, including Fortune 100 and mid-market organizations. Our contract benefits include access to a broad client network, an experienced recruiting team, a behavioral health platform, medical, dental, and vision coverage, a health savings account, voluntary insurance options, a 401(k), applicable sick pay, and commuter benefits in select locations. We have also received recognition for work-life balance, career growth, diversity, and leadership. We are an equal opportunity employer.

last updated 43 week of 2026