Senior Windows Systems Engineer – Endpoint Deployment, PKI

This is a fully remote position, open to applicants in Pakistan, +5 more countries.

📋 Description

• Take ownership of the complete signing process for Windows kernel drivers, encompassing EV code signing, Microsoft Partner Center attestation, and HLK/WHQL submissions as required.

• Ensure compliance with the evolving driver signing standards set by Microsoft.

• Create and manage MSI, MSIX, and Win32 (.intunewin) packages for deployment via Intune.

• Establish installation and uninstallation logic, detection rules, dependencies, silent installations, and upgrade pathways.

• Oversee code-signing, driver-signing, root and intermediate TLS inspection, along with device and service certificates.

• Manage the issuance of certificates, secure storage in HSMs or key vaults, distribution, rotation, renewal, and revocation.

• Incorporate signing and packaging processes into CI/CD for creating signed, versioned, and reproducible releases.

• Develop deployment guides, Intune configuration profiles, and certificate trust policies.

• Participate in customer endpoint-team calls to resolve rollout issues.

• Monitor deployment success rates, track failed installations, and address signing or trust errors, rectifying underlying issues.

⛳️ Requirements

• A minimum of 5 years of experience in Windows systems engineering, endpoint engineering, or build and release processes for Windows software.

• In-depth knowledge of the Windows installer stack, services, registry, and certificate stores.

• Practical experience in signing and delivering Windows kernel drivers via Microsoft’s attestation or WHQL processes.

• Familiarity with EV certificates, cross-signing history, Secure Boot, and HVCI requirements.

• Experience in enterprise-scale Microsoft Intune packaging and deployment, including Win32 applications, MSI/MSIX, detection rules, and configuration profiles.

• Knowledge of SCCM/MECM is advantageous.

• Experience in managing the production certificate lifecycle using Azure Key Vault, HSMs, internal CAs, or certificate management platforms.

• Ability to articulate chains of trust to developers and customer security teams.

• Proficiency in PowerShell scripting.

• Experience in integrating signing or packaging steps into CI/CD pipelines, such as GitHub Actions or Azure DevOps.

• Strong communication skills to clearly explain deployment procedures in plain English and produce user-friendly documentation.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and career advancement.

• Flexible work arrangements and a supportive team environment.