Desktop Engineer - Windows

About the role

Computer World Services Corp (CWS) is seeking a detail-oriented and results-driven Desktop Engineer – Windows responsible for engineering, configuring, securing, and maintaining Windows-based environments in an enterprise federal IT setting.

A primary focus of this position is the identification and remediation of security vulnerabilities through Microsoft System Center Configuration Manager (SCCM/MECM), NinjaOne, PowerShell, and other enterprise management technologies. The Desktop Engineer develops, tests, deploys, and maintains SCCM application and remediation packages designed to correct software vulnerabilities, configuration deficiencies, outdated applications, and other security exposures.

Key Tasks & Responsibilities Windows Vulnerability Remediation

- Analyze Windows vulnerability findings and determine appropriate technical remediation strategies.

- Develop and implement remediation solutions for vulnerabilities affecting Windows operating systems, third-party applications, drivers, utilities, and configurations.

- Translate vulnerability findings, CVEs, security advisories, and remediation requirements into deployable technical solutions.

- Support remediation activities associated with applicable CISA Binding Operational Directives, including BOD 26-04, and other federal cybersecurity requirements.

- Coordinate with cybersecurity and vulnerability management teams to validate vulnerability findings and determine appropriate remediation actions.

- Design, develop, test, deploy, and maintain SCCM/MECM application packages, programs, task sequences, scripts, and remediation packages.

- Monitor SCCM deployment status and produce reports identifying successful, failed, pending, and non-compliant devices.

- Support the use and evaluation of NinjaOne as an enterprise endpoint management,

- Troubleshoot operating system, application, hardware, driver, security, and performance problems.

- Perform root cause analysis and develop sustainable solutions for recurring issues.

- Test scripts to ensure they operate safely across supported Windows configurations.

- Maintain reusable PowerShell libraries and documented automation procedures.

Monitoring & Reporting

- Support development of dashboards and metrics showing vulnerability remediation progress.

- Assist management and cybersecurity teams in measuring remediation performance against established service levels and federal requirements.

Application Packaging & Software Lifecycle Management

- Package enterprise applications for automated deployment.

- Test application compatibility with supported Windows configurations.

- Maintain current versions of enterprise applications and identify obsolete or unsupported software.

- Develop upgrade and migration packages to replace vulnerable or end-of-life applications.