Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 36 days ago

Sr. Endpoint Engineer

HKS, Inc.84 open roles

Where
Dallas
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSr. Endpoint EngineerHKS, Inc. · Dallas

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on HKS, Inc.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. HKS, Inc. postings stay open a median of 15 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 36 days ago

HKS, Inc. median: 15 days open

The posting

Overview:

Responsible for the enterprise patch and update management platform and the endpoint services supporting approximately 2,500 devices across 28 locations, spanning Azure and on-premises workloads. Leads the monthly patch cycle for Windows, macOS, Windows Server, and firmware, including deployment ring design, test coordination, and critical CVE remediation. Manages the device, application, policy, and security configurations to remain compliant. Partners across IT, leveraging Intune and other endpoint management tools to deliver endpoint solutions to the firm.

Responsibilities:

  • Owns the monthly patch cycle for Windows and macOS endpoints and Windows Server
  • Designs and maintains deployment rings (pilot, early adopter, broad), coordinating with test groups to validate patch levels for monthly publication
  • Patches third-party applications (browsers, runtimes, 7zip, etc.) through Intune or a dedicated patch management tool
  • Manages firmware, driver, and BIOS updates for laptops and server hardware
  • Meets remediation SLAs for critical and high-severity CVEs, executes out-of-band emergency patching for actively exploited vulnerabilities, and reports on compliance, exceptions, and drift
  • Partners with the security team on scan findings, false positives, risk acceptance, and remediation planning
  • Packages, deploys, updates, and retires applications (Win32, MSIX, Store, macOS pkg/dmg) and drivers, including detection rules, dependencies, and supersedence
  • Maintains a documented QA methodology for packages, patches, and configuration changes — test plans, acceptance criteria, and documented results before broad release
  • Administers Intune across Windows, macOS, iOS/iPadOS, and Android, including enrollment (Autopilot, Apple Business Manager/ADE, Android Enterprise), configuration profiles, compliance policies, and Conditional Access inputs
  • Onboards and manages servers in Azure Arc to extend update and configuration management on-premises and cloud servers
  • Maintains SCCM/Intune co-management and drives cloud native adoption
  • Maintains device and security baselines and hardening configurations
  • Helps design, build, and document the patch and device management system end to end, including architecture, runbooks, and standard operating procedures
  • Writes and maintains policies and standards for patching, update rings, device configuration, and application lifecycle
  • Evaluates, pilots, and recommends tooling to close gaps in the current platform
  • Automates operational work using PowerShell, Microsoft Graph, and bash/zsh
  • Builds patch compliance and device health dashboards for IT leadership
  • Submits and drives change requests for all production work, represents those changes at change advisory board review, and communicates maintenance windows, impact, and rollback plans
  • Assists application owners and other IT teams with packaging, deployment, and patching
  • Supports the service desk on escalated endpoint issues, patch-related breakage, and rollbacks
  • Participates in scheduled after-hours maintenance and supports high-severity incidents after-hours
  • Ensures all technology and departmental activities comply with company, security, regulatory and regional requirements
  • Stays current with industry trends, technological advancements, and leverages these capabilities to improve and streamline the operation

Qualifications:

  • B.A./B.S. degree in Computer Science or related field, or equivalent work experience
  • Typically, with 6+ years of experience, with 4+ years of experience administering Microsoft Intune in a production enterprise environment
  • Advanced competency of Microsoft Endpoint Management (MEM) technologies, including Intune, Autopilot, Azure ARC, AZURE AD
  • Advanced competency of CVE/CVSS scoring, vulnerability scanner output, and remediation SLA reporting
  • Working knowledge of SCCM/MECM, including co-management with Intune
  • Experience with managing macOS in an enterprise environment, plus iOS and Android mobile device management
  • Experience with third-party application patching using Intune integrations or a dedicated patch management tool
  • Experience with application packaging and deployment (Win32, MSIX, macOS pkg/dmg) and with a documented QA and testing methodology
  • Experience with scripting for automation: PowerShell required; Microsoft Graph and bash/zsh for macOS strongly preferred
  • Experience with disciplined change management practice (ITIL-aligned) and a genuine willingness to write and maintain documentation and policy
  • Experience in MS Office Suite
  • Strong communication and interpersonal skills, with the ability to interact with all levels of staff
  • Strong work ethic and eagerness to produce high quality, accurate results
  • Ability to hold sensitive information with a high level of confidentiality and integrity
  • Ability to present ideas in a clear, concise and professional manner both verbally and in writing
  • Ability to proactively solve problems and apply innovative solutions
  • Ability to collaborate in a team environment and ability to work independently
  • Ability to prioritize competing demands
  • Ability to effectively meet deadlines at expected quality
  • Travel may be required

If you currently work for HKS, please submit your application via the Internal Careers Portal.

HKS is an EEO/AA Employer: M/F/Disabled/Veteran

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against HKS, Inc.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on HKS, Inc.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    HKS, Inc.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.