[Hiring] Senior Windows Systems Engineer @Creative Chaos

Role Description

The Senior Windows Systems Engineer makes sure our Windows software gets onto enterprise machines and stays there: signed, trusted, packaged, and deployable at scale.

• Own kernel driver signing: Run the end-to-end signing process for Windows kernel drivers, including EV code signing, Microsoft Partner Center attestation, and HLK/WHQL submissions.
• Package for the enterprise: Build and maintain MSI, MSIX, and Win32 (.intunewin) packages for Intune deployment, defining install and uninstall logic, detection rules, dependencies, silent installs, and upgrade paths.
• Manage the certificate lifecycle: Own every certificate the product relies on, handling issuance, secure storage, distribution, rotation, renewal, and revocation.
• Automate signing and release: Integrate signing and packaging into CI/CD so every release is signed, versioned, and reproducible.
• Enable customer deployments: Write deployment guides, Intune configuration profiles, and certificate trust policies; join calls with customer endpoint teams to troubleshoot rollouts.
• Own reliability in the field: Track deployment success rates, failed installs, and signing or trust errors across the install base, fixing root causes.

Qualifications

• Seasoned Windows systems engineer: 5+ years of experience in Windows systems engineering, endpoint engineering, or build and release for Windows software.
• Driver signing experience: Signed and shipped Windows kernel drivers in production through Microsoft’s attestation or WHQL process.
• Hands-on Intune packaging: Packaged and deployed software through Microsoft Intune at enterprise scale, including Win32 apps, MSI/MSIX, detection rules, and configuration profiles.
• PKI and certificate management: Managed certificate lifecycles in production, using tools such as Azure Key Vault, HSMs, internal CAs, or certificate management platforms.
• Automation mindset: Scripted with PowerShell and built signing or packaging steps into CI/CD pipelines such as GitHub Actions or Azure DevOps.
• Clear communicator: Can walk a US enterprise IT team through a deployment in plain English and write documentation people actually follow.

Requirements

• Knowledge of the Windows installer stack, services, the registry, and the certificate stores.
• Understanding of EV certificates, cross-signing history, and what Secure Boot and HVCI require.
• SCCM/MECM experience is a plus.