Senior Windows Systems Engineer – Endpoint Deployment, PKI

Job not on LinkedIn

🔥 15 hours ago

🌐 Pakistan, India, +4 more countries – Remote

🇵🇰 Pakistan – Remote 🇮🇳 India – Remote 🇩🇪 Germany – Remote 🇦🇷 Argentina – Remote 🇷🇴 Romania – Remote 🇧🇷 Brazil – Remote

⏰ Full Time

🟠 Senior

⚙️ Systems Engineer

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 306 days.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Creative Chaos

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2000

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Creative Chaos is an innovation delivery agency that partners with businesses of all sizes to develop and bring products to market. They focus on creating user-centered experiences and translating consumer insights into innovative products. They offer services such as team augmentation, MVP (Minimum Viable Product) development, and DevOps and cloud solutions to help businesses innovate, develop, and deliver products efficiently. Creative Chaos acts as an extension to their clients' teams, providing support and expertise throughout the product development process.

📋 Description

• Own the end-to-end signing process for Windows kernel drivers, including EV code signing, Microsoft Partner Center attestation, and HLK/WHQL submissions where needed • Maintain compliance with Microsoft’s changing driver signing requirements • Build and maintain MSI, MSIX, and Win32 (.intunewin) packages for Intune deployment • Define install and uninstall logic, detection rules, dependencies, silent installs, and upgrade paths • Manage code-signing, driver-signing, root and intermediate TLS inspection, device, and service certificates • Handle certificate issuance, secure storage in HSMs or key vaults, distribution, rotation, renewal, and revocation • Integrate signing and packaging into CI/CD for signed, versioned, and reproducible releases • Write deployment guides, Intune configuration profiles, and certificate trust policies • Join customer endpoint-team calls to troubleshoot rollouts • Track deployment success rates, failed installs, and signing or trust errors, fixing root causes

🎯 Requirements

• 5+ years of experience in Windows systems engineering, endpoint engineering, or build and release for Windows software • Expert knowledge of the Windows installer stack, services, registry, and certificate stores • Production experience signing and shipping Windows kernel drivers through Microsoft’s attestation or WHQL process • Understanding of EV certificates, cross-signing history, Secure Boot, and HVCI requirements • Enterprise-scale Microsoft Intune packaging and deployment experience, including Win32 apps, MSI/MSIX, detection rules, and configuration profiles • SCCM/MECM experience is a plus • Production certificate lifecycle management using Azure Key Vault, HSMs, internal CAs, or certificate management platforms • Ability to explain chains of trust to developers and customer security teams • PowerShell scripting experience • Experience integrating signing or packaging steps into CI/CD pipelines such as GitHub Actions or Azure DevOps • Ability to communicate deployment procedures clearly in plain English and write usable documentation

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume