Image Engineer-Windows 11 Imaging with Powershell Scripting

Location: George Town, Penang, Malaysia

Department: Information Technology

Workplace: on_site

Employment Type: full

Description

JOB DESCRIPTION:

We are looking for Image Engineer with 6-8 years of experience.

Required Skills : Windows 11 Imaging with PowerShell scripting

Windows Image Creation

• Develop and maintain standardized Windows OS images for desktops and laptops.
• Automate provisioning of Windows 10 and Windows 11 for hardware devices using OEM images released by the respective vendors.
• Use Microsoft tools like Microsoft Deployment Toolkit (MDT), Windows ADK, and SCCM for image creation and re-deployment to target a single or group of pcs. 
• Creating WinPE, ADK and Boot image for the new image releases to update the image and pxe settings. 
• Automate OS images using XML, PowerShell scripts and batch files to meet the requirements.
• Maintain cross functionality of drivers based on the different hardware components is met and no issues during image deployment. 
• Once the image creation is completed, validate and document the image configuration and save the updates in share for future reference. 
• Create a ghost and full flash update image test deployment and redeploy the image to make sure we are not seeing any issues in the production deployment. 
• Delivered Level 3 support for image deployment issues, resolving problems in real-time and documenting changes to ensure fixes were integrated into subsequent base image releases.
• Perform rigorous testing of the new image released by HP and Microsoft.
• Coordinate with support teams to understand the required changes for the preload image & use PowerShell to create the required scripts.
• Create preload image based on the request and install the required application in the image and capture the ghost and full flash update image.
• Perform a security scan for the image before the image is released to production. 
• Update the images when new windows patches, security updates and Application version are released and test the image before releasing the production. 

SCCM/MECM Administration and Intune Integration

• Design and configure SCCM architecture to maintain site hierarchy and site roles for successful image, application and patch deployments. 
• Maintain health of SCCM server, Client and distribution points and remediate if any issues are reported. 
• Perform Disaster recovery and backup testing for configuration manager. 
• Collaborate with the application support team to obtain installation instructions and necessary support files.
• Facilitate the creation and configuration of applications based on provided documentation and resources.
• Conduct thorough testing of applications in a pre-production environment to ensure functionality and stability.
• Coordinate the release of applications to the production environment following successful validation and approval processes.
• Using PowerShell and VBScript create new applications and customizations. 
• Collaborate with security and infrastructure teams to align patching schedules with organizational policies and minimize user disruption.
• Manage and execute Windows patch deployments across all organizational endpoints using Microsoft Endpoint Manager (Intune).
• Ensure devices enrolled in Intune receive patches only through update rings.
• Create new update ring policy to configure the Quality/Feature update deferral/
• Setup the restart behavior and user experience settings. 
• Assign the update ring to the device groups and dynamic groups Azure AD groups for pilot and production devices. 

• Perform patch installation checks on test devices to ensure compatibility and detect potential issues.
• Schedule and execute pre-production patch deployments using Microsoft Endpoint Manager/Intune to validate update stability before production rollout.
• Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.
• For other devices, use SCCM/MECM to configure and deploy patches. 
• Download and validate deployment packages, ensuring all required updates are available and properly distributed to distribution points.
• Monitor patch deployment status through Intune/SCCM/MECM reporting tools, troubleshoot failed updates, and ensure compliance across all managed devices.
• Collaborate with support and infrastructure teams to address any issues found during pre-production testing.
• Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.
• Create custom windows image deployment using task sequence and maintain OSD task sequence for new image deployment and in-place upgrades. 
• Monitor Application, OS & patch deployment compliance and troubleshoot if any failures. 
• Generate custom reports for application, package and patch deployment success. 
• Collaborate with other support teams like network and AD team to resolve issues. 
• Before performing configuration manager upgrade follow change request procedures for all servers and client changes.
• Upgrade the configuration manager infrastructure when a new update is released by Microsoft and make sure all the servers and clients are updated post configuration changes and monitor site and backup health. 
• Identify the opportunities for automation and create new scripts to do the automation in deployment, patch and content distribution using PowerShell script. 
• When needed assist in enrolling devices in Autopilot via Microsoft Intune, if issues are seen during the image deployment. 
• Manage Autopilot provisioning and hybrid Azure AD join scenarios.
• Enable automatic enrollment into Microsoft Intune for new pc setup.
• Integrate imaging workflows with SCCM and Intune for new OS deployment.
• Customize OOBE with company branding for default application installation, privacy settings, desktop customization and license terms.
• Verify the hardware hash uploads and profile assignments based on the IDs.  

• Guide end users through the Out-of-Box Experience when setting up the image deployment. 
• Coordinate with end users to support login, setup, and connectivity issues once the image deployment is completed. 
• Monitor new device OS deployment status using enrollment status page for the successful image deployment.
• Resolve common issues like network connectivity, login related issues and device registration problems through Intune.
• If there are any errors reported in image deployment, then perform autopilot reset or refresh to begin the image installation again to see if that is fixing the issue. 
• Maintain accurate hardware records of device deployments and user interactions.
• Once the OS installation is completed, assist with physical device tagging and inventory updates post-deployment.
• Support devices repurpose, recovery, and retirement using Autopilot features.
• When new driver or firmware is released, coordinate with hardware vendor to get the required information and perform testing in the test environment before releasing to the production environment. 
• Work closely with helpdesk and desktop support teams to align for any issues reported to share the break fix to fix the issues.
• Create and maintain documentation for imaging creation procedures, standard practice that  need to be followed while creating the image and troubleshooting guides if we face any issues. 
• Maintain SOPs, deployment guides, and technical documentation in the repository and share it whenever needed. 
• Provide Knowledge transfer when a new team member is joined. 

Linux Image deployment for POS Devices.

• Build and maintain standardized Linux OS images for Lenovo POS devices. 
• When new hardware is released, we need to test the image is working fine on the hardware if any changes are needed then we need to create a new image and test the image before releasing it to production.
• Use ghost application to test and redeploy the image created for the POS devices. 
• Use configuration files to run unattended installations using fewer manual efforts. 
• Test images in virtual and physical environments before production rollout.
• Ensure post-deployment configuration aligns with organizational standards.

Requirements

Required Skills & Qualifications

• Strong experience with Windows OS imaging tools (MDT, SCCM/MECM DISM, Sysprep, Ghost and FFU).

• Proficiency in PowerShell and batch scripting.
• Understanding of UEFI/BIOS configurations and PXE boot environments in Winpe.
• Experience with endpoint management platforms (SCCM, Intune, Autopilot).
• Knowledge of networking protocols and deployment over LAN/WAN.
• Deep understanding of Windows Server, Active Directory, DNS, and Group Policy.
• Experience with SQL and SCCM/MECM reporting.
• Knowledge of networking protocols (TCP/IP), virtualization, and endpoint security.
• Strong knowledge of Windows Autopilot and Intune.
• Experience with device lifecycle management and cloud-based provisioning.
• Experience in Linux image creation and deployment for POS devices.