{"id":4234625,"url":"https://alion.io/job/creative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki","title":"Senior Windows Systems Engineer - Endpoint Deployment & PKI","company":{"id":672867,"name":"Creative Chaos","domain":"creativechaos.co","url":"https://alion.io/company/creativechaos","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"D","score":48,"open_postings":143,"ghost_share":0.867,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-12T10:38:37Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN","DE","AR","BR","PK","RO"],"hiring_countries_total":6,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Windows","optional":false},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"GitHub Actions","optional":true},{"name":"PKI","optional":true},{"name":"PowerShell","optional":true}],"status":"live","first_seen_at":"2026-11-13T11:35:51Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T11:35:51Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About us:\nCreative Chaos is an AI orchestration company. We help businesses re-engineer how work actually gets done by placing AI orchestrators inside their teams to redesign workflows, deploy agents, and rewire operations end-to-end.\nJob Summary:\nThe Senior Windows Systems Engineer makes sure our Windows software gets onto enterprise machines and stays there: signed, trusted, packaged, and deployable at scale.\nYou will own the path from a built binary to a running agent on thousands of managed devices. That covers kernel driver signing with Microsoft, Intune packaging and deployment, and the full lifecycle of every certificate the product depends on. When a certificate is about to expire, you knew about it 90 days ago. When an enterprise IT team asks how to deploy us, you hand them a package that just works.\nThis is a hands-on, detail-obsessed role. We are hiring someone who has been through Microsoft’s driver signing process, has packaged software for Intune in production, and treats certificate management as a discipline, not an afterthought.\nJob Description:\nOwn kernel driver signing: You run the end-to-end signing process for our Windows kernel drivers, including EV code signing, Microsoft Partner Center attestation, and HLK/WHQL submissions where needed. You keep the pipeline compliant with Microsoft’s driver signing requirements as they change.\n Package for the enterprise: You build and maintain MSI, MSIX, and Win32 (.intunewin) packages for Intune deployment. You define install and uninstall logic, detection rules, dependencies, silent installs, and upgrade paths that IT teams can roll out to thousands of devices without a single support ticket.\nManage the certificate lifecycle: You own every certificate the product relies on: code signing, driver signing, root and intermediate certificates for TLS inspection, and device and service certificates. You handle issuance, secure storage in HSMs or key vaults, distribution, rotation, renewal, and revocation, with zero surprise expiries.\nAutomate signing and release: You integrate signing and packaging into CI/CD so every release is signed, versioned, and reproducible. No manual steps on someone’s laptop and no private keys in places they should not be.\nEnable customer deployments: You write the deployment guides, Intune configuration profiles, and certificate trust policies that customer IT teams follow. You join calls with their endpoint teams to troubleshoot rollouts when needed.\nOwn reliability in the field: You track deployment success rates, failed installs, and signing or trust errors across the install base, and you fix root causes, not symptoms.\nRequirements\nSeasoned Windows systems engineer: 5+ years of experience in Windows systems engineering, endpoint engineering, or build and release for Windows software. You know the Windows installer stack, services, the registry, and the certificate stores inside out.\nDriver signing experience: You have signed and shipped Windows kernel drivers in production through Microsoft’s attestation or WHQL process. You understand EV certificates, cross-signing history, and what Secure Boot and HVCI require.\nHands-on Intune packaging: You have packaged and deployed software through Microsoft Intune at enterprise scale, including Win32 apps, MSI/MSIX, detection rules, and configuration profiles. SCCM/MECM experience is a plus.\nPKI and certificate management: You have managed certificate lifecycles in production, using tools such as Azure Key Vault, HSMs, internal CAs, or certificate management platforms. You can explain a chain of trust to a developer and to a customer’s security team.\nAutomation mindset: You script with PowerShell and have built signing or packaging steps into CI/CD pipelines such as GitHub Actions or Azure DevOps.\n Clear communicator: You can walk a US enterprise IT team through a deployment in plain English, and you write documentation people actually follow.","description_format":"text","description_chars":3941,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"},{"name":"Germany","iso":"DE","kind":"country"},{"name":"Argentina","iso":"AR","kind":"country"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Pakistan","iso":"PK","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-13T11:35:51Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":293,"reasons":["conf:3","win:early","comp:brand"],"computed_at":"2026-11-13T15:34:57Z"},"pay":null,"html_url":"https://alion.io/job/creative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki","json_url":"https://alion.io/job/creative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki.json","meta":{"generated_at":"2026-11-13T15:34:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31322,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672867},"rest":"https://alion.io/mcp/rest/get_company?id=672867"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcreative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcreative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcreative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/creative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcreative-chaos-senior-windows-systems-engineer-endpoint-deployment-pki"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4234625}},{"tool":"search_jobs","arguments":{"company":"creativechaos.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4234625},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}