Two95 International

Image Engineer: Windows Imaging with PowerShell Scripting

System AdministrationConfirmed live in the last 24 hours

Full-timeGeorge Town, Penang, Malaysia$168k - $170kIn-person

About the Job

Requirements

Strong experience with Windows operating system imaging tools, including Microsoft Deployment Toolkit, System Center Configuration Manager/Microsoft Endpoint Configuration Manager, Deployment Image Servicing and Management, Sysprep, Ghost, and Full Flash Update.
Proficiency in PowerShell and batch scripting.
Understanding of Unified Extensible Firmware Interface/Basic Input/Output System configurations and Preboot Execution Environment boot environments in Windows Preinstallation Environment.
Experience with endpoint management platforms, including System Center Configuration Manager, Intune, and Autopilot.
Knowledge of networking protocols and deployment over local and wide area networks.
Deep understanding of Windows Server, Active Directory, Domain Name System, and Group Policy.
Experience with Structured Query Language and System Center Configuration Manager/Microsoft Endpoint Configuration Manager reporting.
Knowledge of networking protocols, including Transmission Control Protocol/Internet Protocol, virtualization, and endpoint security.
Strong knowledge of Windows Autopilot and Intune.
Experience with device lifecycle management and cloud-based provisioning.
Experience in Linux image creation and deployment for point-of-sale devices.

Responsibilities

Develop and maintain standardized Windows operating system images for desktops and laptops.
Automate Windows 10 and Windows 11 provisioning for hardware devices using original equipment manufacturer images released by vendors.
Use Microsoft Deployment Toolkit, Windows Assessment and Deployment Kit, and System Center Configuration Manager to create and redeploy images to individual or groups of PCs.
Create Windows Preinstallation Environment, Assessment and Deployment Kit, and boot images for new image releases and update image and Preboot Execution Environment settings.
Automate operating system images using XML, PowerShell scripts, and batch files.
Maintain driver compatibility across hardware components and prevent image deployment issues.
Validate and document image configurations after creation and save updates in a shared repository.
Create Ghost and Full Flash Update image test deployments and redeploy images to check for production deployment issues.
Provide Level 3 support for image deployment issues, resolve problems, and document changes for subsequent base image releases.
Test new images released by HP and Microsoft.
Coordinate with support teams to understand preload image changes and use PowerShell to create the required scripts.
Create preload images on request, install required applications, and capture Ghost and Full Flash Update images.
Run security scans on images before production release.
Update images when Windows patches, security updates, or application versions are released, and test images before production release.
Design and configure System Center Configuration Manager architecture, including site hierarchy and site roles, for image, application, and patch deployments.
Maintain the health of System Center Configuration Manager servers, clients, and distribution points, and remediate reported issues.
Perform disaster recovery and backup testing for Configuration Manager.
Collaborate with application support to obtain installation instructions and support files.
Create and configure applications using provided documentation and resources.
Test applications in pre-production to ensure functionality and stability.
Coordinate application releases to production after validation and approval.
Use PowerShell and VBScript to create applications and customizations.
Coordinate patching schedules with security and infrastructure teams to align with organizational policies and minimize user disruption.
Manage and execute Windows patch deployments across organizational endpoints using Microsoft Endpoint Manager/Intune.
Ensure Intune-enrolled devices receive patches only through update rings.
Create update ring policies to configure quality and feature update deferrals.
Configure restart behavior and user experience settings.
Assign update rings to device groups and dynamic Microsoft Entra ID groups for pilot and production devices.
Check patch installations on test devices for compatibility and potential issues.
Schedule and execute pre-production patch deployments using Microsoft Endpoint Manager/Intune to validate stability before production rollout.
Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.
Configure and deploy patches for other devices using System Center Configuration Manager/Microsoft Endpoint Configuration Manager.
Download and validate deployment packages and ensure required updates are available and distributed to distribution points.
Monitor patch deployment through Intune and Configuration Manager reporting tools, troubleshoot failed updates, and maintain compliance across managed devices.
Work with support and infrastructure teams to address issues found during pre-production testing.
Create custom Windows image deployments using task sequences and maintain operating system deployment task sequences for new image deployments and in-place upgrades.
Monitor application, operating system, and patch deployment compliance and troubleshoot failures.
Generate custom reports for application, package, and patch deployment success.
Collaborate with network and Active Directory support teams to resolve issues.
Follow change request procedures for server and client changes before Configuration Manager upgrades.
Upgrade Configuration Manager infrastructure when Microsoft releases updates, ensure servers and clients are updated after configuration changes, and monitor site and backup health.
Identify automation opportunities and create PowerShell scripts to automate deployment, patching, and content distribution.
Assist with enrolling devices in Autopilot through Microsoft Intune when needed to address image deployment issues.
Manage Autopilot provisioning and hybrid Microsoft Entra ID join scenarios.
Enable automatic enrollment into Microsoft Intune for new PC setups.
Integrate imaging workflows with System Center Configuration Manager and Intune for new operating system deployments.
Customize the out-of-box experience with company branding, default application installation, privacy settings, desktop customization, and license terms.
Verify hardware hash uploads and profile assignments based on device identifiers.
Guide end users through the out-of-box experience when setting up image deployments.
Support end users with login, setup, and connectivity issues after image deployment.
Monitor new-device operating system deployment status using the enrollment status page.
Resolve common network connectivity, login, and device registration issues through Intune.
Perform Autopilot reset or refresh to restart image installation when deployment errors occur.
Maintain accurate hardware records of device deployments and user interactions.
Assist with physical device tagging and inventory updates after operating system installation.
Support device repurposing, recovery, and retirement using Autopilot features.
Coordinate with hardware vendors on new drivers or firmware, obtain required information, and test changes before production release.
Work with helpdesk and desktop support teams to address reported issues and share break-fix solutions.
Create and maintain image-creation procedures, standards, and troubleshooting guides.
Maintain standard operating procedures, deployment guides, and technical documentation in the repository and share them as needed.
Provide knowledge transfer to new team members.
Build and maintain standardized Linux operating system images for Lenovo point-of-sale devices.
Test images on new hardware, create updated images when needed, and test them before production release.
Use Ghost to test and redeploy images for point-of-sale devices.
Use configuration files to run unattended installations with less manual effort.
Test images in virtual and physical environments before production rollout.
Ensure post-deployment configurations meet organizational standards.

Image Engineer-Windows 11 Imaging with Powershell Scripting

Two95 International Inc. · George Town, Malaysia · Full-time · Posted 2026-04-16

Salary: unknown currency 168,000–170,000

Workplace: on_site

Department: Information Technology

Description

JOB DESCRIPTION:

We are looking for Image Engineer with 6-8 years of experience.

Required Skills : Windows 11 Imaging with PowerShell scripting

Windows Image Creation

Develop and maintain standardized Windows OS images for desktops and laptops.
Automate provisioning of Windows 10 and Windows 11 for hardware devices using OEM images released by the respective vendors.
Use Microsoft tools like Microsoft Deployment Toolkit (MDT), Windows ADK, and SCCM for image creation and re-deployment to target a single or group of pcs.
Creating WinPE, ADK and Boot image for the new image releases to update the image and pxe settings.
Automate OS images using XML, PowerShell scripts and batch files to meet the requirements.
Maintain cross functionality of drivers based on the different hardware components is met and no issues during image deployment.
Once the image creation is completed, validate and document the image configuration and save the updates in share for future reference.
Create a ghost and full flash update image test deployment and redeploy the image to make sure we are not seeing any issues in the production deployment.
Delivered Level 3 support for image deployment issues, resolving problems in real-time and documenting changes to ensure fixes were integrated into subsequent base image releases.
Perform rigorous testing of the new image released by HP and Microsoft.
Coordinate with support teams to understand the required changes for the preload image & use PowerShell to create the required scripts.
Create preload image based on the request and install the required application in the image and capture the ghost and full flash update image.
Perform a security scan for the image before the image is released to production.
Update the images when new windows patches, security updates and Application version are released and test the image before releasing the production.

SCCM/MECM Administration and Intune Integration

Design and configure SCCM architecture to maintain site hierarchy and site roles for successful image, application and patch deployments.
Maintain health of SCCM server, Client and distribution points and remediate if any issues are reported.
Perform Disaster recovery and backup testing for configuration manager.
Collaborate with the application support team to obtain installation instructions and necessary support files.
Facilitate the creation and configuration of applications based on provided documentation and resources.
Conduct thorough testing of applications in a pre-production environment to ensure functionality and stability.
Coordinate the release of applications to the production environment following successful validation and approval processes.
Using PowerShell and VBScript create new applications and customizations.
Collaborate with security and infrastructure teams to align patching schedules with organizational policies and minimize user disruption.
Manage and execute Windows patch deployments across all organizational endpoints using Microsoft Endpoint Manager (Intune).
Ensure devices enrolled in Intune receive patches only through update rings.
Create new update ring policy to configure the Quality/Feature update deferral/
Setup the restart behavior and user experience settings.
Assign the update ring to the device groups and dynamic groups Azure AD groups for pilot and production devices.
Perform patch installation checks on test devices to ensure compatibility and detect potential issues.
Schedule and execute pre-production patch deployments using Microsoft Endpoint Manager/Intune to validate update stability before production rollout.
Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.
For other devices, use SCCM/MECM to configure and deploy patches.
Download and validate deployment packages, ensuring all required updates are available and properly distributed to distribution points.
Monitor patch deployment status through Intune/SCCM/MECM reporting tools, troubleshoot failed updates, and ensure compliance across all managed devices.
Collaborate with support and infrastructure teams to address any issues found during pre-production testing.
Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.
Create custom windows image deployment using task sequence and maintain OSD task sequence for new image deployment and in-place upgrades.
Monitor Application, OS & patch deployment compliance and troubleshoot if any failures.
Generate custom reports for application, package and patch deployment success.
Collaborate with other support teams like network and AD team to resolve issues.
Before performing configuration manager upgrade follow change request procedures for all servers and client changes.
Upgrade the configuration manager infrastructure when a new update is released by Microsoft and make sure all the servers and clients are updated post configuration changes and monitor site and backup health.
Identify the opportunities for automation and create new scripts to do the automation in deployment, patch and content distribution using PowerShell script.
When needed assist in enrolling devices in Autopilot via Microsoft Intune, if issues are seen during the image deployment.
Manage Autopilot provisioning and hybrid Azure AD join scenarios.
Enable automatic enrollment into Microsoft Intune for new pc setup.
Integrate imaging workflows with SCCM and Intune for new OS deployment.
Customize OOBE with company branding for default application installation, privacy settings, desktop customization and license terms.
Verify the hardware hash uploads and profile assignments based on the IDs.
Guide end users through the Out-of-Box Experience when setting up the image deployment.
Coordinate with end users to support login, setup, and connectivity issues once the image deployment is completed.
Monitor new device OS deployment status using enrollment status page for the successful image deployment.
Resolve common issues like network connectivity, login related issues and device registration problems through Intune.
If there are any errors reported in image deployment, then perform autopilot reset or refresh to begin the image installation again to see if that is fixing the issue.
Maintain accurate hardware records of device deployments and user interactions.
Once the OS installation is completed, assist with physical device tagging and inventory updates post-deployment.
Support devices repurpose, recovery, and retirement using Autopilot features.
When new driver or firmware is released, coordinate with hardware vendor to get the required information and perform testing in the test environment before releasing to the production environment.
Work closely with helpdesk and desktop support teams to align for any issues reported to share the break fix to fix the issues.
Create and maintain documentation for imaging creation procedures, standard practice that need to be followed while creating the image and troubleshooting guides if we face any issues.
Maintain SOPs, deployment guides, and technical documentation in the repository and share it whenever needed.
Provide Knowledge transfer when a new team member is joined.

Linux Image deployment for POS Devices.

Build and maintain standardized Linux OS images for Lenovo POS devices.
When new hardware is released, we need to test the image is working fine on the hardware if any changes are needed then we need to create a new image and test the image before releasing it to production.
Use ghost application to test and redeploy the image created for the POS devices.
Use configuration files to run unattended installations using fewer manual efforts.
Test images in virtual and physical environments before production rollout.
Ensure post-deployment configuration aligns with organizational standards.

Requirements

Required Skills & Qualifications

Strong experience with Windows OS imaging tools (MDT, SCCM/MECM DISM, Sysprep, Ghost and FFU).
Proficiency in PowerShell and batch scripting.
Understanding of UEFI/BIOS configurations and PXE boot environments in Winpe.
Experience with endpoint management platforms (SCCM, Intune, Autopilot).
Knowledge of networking protocols and deployment over LAN/WAN.
Deep understanding of Windows Server, Active Directory, DNS, and Group Policy.
Experience with SQL and SCCM/MECM reporting.
Knowledge of networking protocols (TCP/IP), virtualization, and endpoint security.
Strong knowledge of Windows Autopilot and Intune.
Experience with device lifecycle management and cloud-based provisioning.
Experience in Linux image creation and deployment for POS devices.

Apply

Apply at Two95 International Inc.

About the Company

Two95 International

Company size: Not listed
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Two95 International

See more jobs