Senior Windows Systems Engineer - Endpoint Deployment & PKI
New
C
Creative ChaosAI orchestration
Pakistan. India. Germany. Argentina. Romania. BrazilFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Plain English
- Experience
- 5+ years of experience in Windows systems engineering, endpoint engineering, or build and release for Windows software.
- Required Skills
- CI/CDGitHub Actions
Requirements
- Have 5+ years of experience in Windows systems engineering, endpoint engineering, or build and release for Windows software.
- Know the Windows installer stack, services, registry, and certificate stores.
- Have signed and shipped Windows kernel drivers in production through Microsoft's attestation or WHQL process.
- Understand EV certificates, cross-signing history, Secure Boot, and HVCI requirements.
- Have packaged and deployed software through Microsoft Intune at enterprise scale, including Win32 apps, MSI/MSIX, detection rules, and configuration profiles.
- Have managed production certificate lifecycles using tools such as Azure Key Vault, HSMs, internal CAs, or certificate management platforms.
- Be able to explain a chain of trust to developers and customer security teams.
- Use PowerShell and have built signing or packaging steps into CI/CD pipelines such as GitHub Actions or Azure DevOps.
- Be able to guide a US enterprise IT team through a deployment in plain English and write usable documentation.
Responsibilities
- Run the end-to-end signing process for Windows kernel drivers, including EV code signing, Microsoft Partner Center attestation, and HLK/WHQL submissions where needed.
- Maintain compliance with Microsoft's changing driver signing requirements.
- Build and maintain MSI, MSIX, and Win32 (.intunewin) packages for Intune deployment.
- Define install and uninstall logic, detection rules, dependencies, silent installs, and upgrade paths.
- Manage product certificate issuance, secure storage, distribution, rotation, renewal, and revocation.
- Integrate signing and packaging into CI/CD so releases are signed, versioned, and reproducible.
- Write deployment guides, Intune configuration profiles, and certificate trust policies for customer IT teams.
- Join calls with customer endpoint teams to troubleshoot rollouts when needed.
- Track deployment success rates, failed installs, and signing or trust errors, and fix root causes.
View Full Description & ApplyYou'll be redirected to the employer's site
