Senior Windows Systems Engineer - Endpoint Deployment & PKI
Creative Chaos (company site, opens in a new tab)5+ yrsRemoteDirect career pageEst. 18–35 LPA
Posted 15h ago
Reach people at Creative Chaos
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Creative Chaos you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own end-to-end signing and enterprise deployment of Windows software, from kernel-driver signing through Intune-ready packages and customer rollout guidance.
- Manage product certificates through issuance, secure storage, distribution, rotation, renewal, and revocation; automate signing and packaging in CI/CD.
- Monitor deployment success and trust/signing failures across devices, then resolve root causes.
Minimum Requirements
- Work Experience Required: 5+ years in Windows systems engineering, endpoint engineering, or Windows build and release.
- Production experience signing and shipping Windows kernel drivers through Microsoft attestation or WHQL; familiarity with EV certificates, Secure Boot, and HVCI requirements.
- Production-scale Intune packaging and deployment, including Win32 apps, MSI/MSIX, detection rules, and configuration profiles.
- Production certificate lifecycle management and PowerShell scripting; experience integrating signing or packaging into CI/CD pipelines.
Ideal Candidate Profile
- Has taken Windows kernel drivers through Microsoft signing and shipped them in production, rather than only supporting general Windows administration.
- Can own enterprise endpoint deployment end to end, including packaging, Intune configuration, customer IT guidance, and rollout troubleshooting.
- Combines practical PKI security with repeatable release automation and operational monitoring across a large managed-device install base.