Image Engineer-Windows 11 Imaging with Powershell Scripting

JOB DESCRIPTION:

We are looking for Image Engineer with 6-8 years of experience.

Required Skills : Windows 11 Imaging with PowerShell scripting

Windows Image Creation

• Develop and maintain standardized Windows OS images for desktops and laptops.
• Automate provisioning of Windows 10 and Windows 11 for hardware devices using OEM images released by the respective vendors.
• Use Microsoft tools like Microsoft Deployment Toolkit (MDT), Windows ADK, and SCCM for image creation and re-deployment to target a single or group of pcs.
• Creating WinPE, ADK and Boot image for the new image releases to update the image and pxe settings.
• Automate OS images using XML, PowerShell scripts and batch files to meet the requirements.
• Maintain cross functionality of drivers based on the different hardware components is met and no issues during image deployment.
• Once the image creation is completed, validate and document the image configuration and save the updates in share for future reference.
• Create a ghost and full flash update image test deployment and redeploy the image to make sure we are not seeing any issues in the production deployment.
• Delivered Level 3 support for image deployment issues, resolving problems in real-time and documenting changes to ensure fixes were integrated into subsequent base image releases.
• Perform rigorous testing of the new image released by HP and Microsoft.
• Coordinate with support teams to understand the required changes for the preload image & use PowerShell to create the required scripts.
• Create preload image based on the request and install the required application in the image and capture the ghost and full flash update image.
• Perform a security scan for the image before the image is released to production.
• Update the images when new windows patches, security updates and Application version are released and test the image before releasing the production.

SCCM/MECM Administration and Intune Integration

• Design and configure SCCM architecture to maintain site hierarchy and site roles for successful image, application and patch deployments.

• Maintain health of SCCM server, Client and distribution points and remediate if any issues are reported.

• Perform Disaster recovery and backup testing for configuration manager.

• Collaborate with the application support team to obtain installation instructions and necessary support files.

• Facilitate the creation and configuration of applications based on provided documentation and resources.

• Conduct thorough testing of applications in a pre-production environment to ensure functionality and stability.

• Coordinate the release of applications to the production environment following successful validation and approval processes.

• Using PowerShell and VBScript create new applications and customizations.

• Collaborate with security and infrastructure teams to align patching schedules with organizational policies and minimize user disruption.

• Manage and execute Windows patch deployments across all organizational endpoints using Microsoft Endpoint Manager (Intune).

• Ensure devices enrolled in Intune receive patches only through update rings.

• Create new update ring policy to configure the Quality/Feature update deferral/

• Setup the restart behavior and user experience settings.

• Assign the update ring to the device groups and dynamic groups Azure AD groups for pilot and production devices.

• Perform patch installation checks on test devices to ensure compatibility and detect potential issues.

• Schedule and execute pre-production patch deployments using Microsoft Endpoint Manager/Intune to validate update stability before production rollout.

• Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.

• For other devices, use SCCM/MECM to configure and deploy patches.

• Download and validate deployment packages, ensuring all required updates are available and properly distributed to distribution points.

• Monitor patch deployment status through Intune/SCCM/MECM reporting tools, troubleshoot failed updates, and ensure compliance across all managed devices.

• Collaborate with support and infrastructure teams to address any issues found during pre-production testing.

• Generate and analyze compliance and installation reports to confirm successful deployment and identify anomalies.

• Create custom windows image deployment using task sequence and maintain OSD task sequence for new image deployment and in-place upgrades.

• Monitor Application, OS & patch deployment compliance and troubleshoot if any failures.

• Generate custom reports for application, package and patch deployment success.

• Collaborate with other support teams like network and AD team to resolve issues.

• Before performing configuration manager upgrade follow change request procedures for all servers and client changes.

• Upgrade the configuration manager infrastructure when a new update is released by Microsoft and make sure all the servers and clients are updated post configuration changes and monitor site and backup health.

• Identify the opportunities for automation and create new scripts to do the automation in deployment, patch and content distribution using PowerShell script.

• When needed assist in enrolling devices in Autopilot via Microsoft Intune, if issues are seen during the image deployment.

• Manage Autopilot provisioning and hybrid Azure AD join scenarios.

• Enable automatic enrollment into Microsoft Intune for new pc setup.

• Integrate imaging workflows with SCCM and Intune for new OS deployment.

• Customize OOBE with company branding for default application installation, privacy settings, desktop customization and license terms.

• Verify the hardware hash uploads and profile assignments based on the IDs.

• Guide end users through the Out-of-Box Experience when setting up the image deployment.

• Coordinate with end users to support login, setup, and connectivity issues once the image deployment is completed.

• Monitor new device OS deployment status using enrollment status page for the successful image deployment.

• Resolve common issues like network connectivity, login related issues and device registration problems through Intune.

• If there are any errors reported in image deployment, then perform autopilot reset or refresh to begin the image installation again to see if that is fixing the issue.

• Maintain accurate hardware records of device deployments and user interactions.

• Once the OS installation is completed, assist with physical device tagging and inventory updates post-deployment.

• Support devices repurpose, recovery, and retirement using Autopilot features.

• When new driver or firmware is released, coordinate with hardware vendor to get the required information and perform testing in the test environment before releasing to the production environment.

• Work closely with helpdesk and desktop support teams to align for any issues reported to share the break fix to fix the issues.

• Create and maintain documentation for imaging creation procedures, standard practice that need to be followed while creating the image and troubleshooting guides if we face any issues.

• Maintain SOPs, deployment guides, and technical documentation in the repository and share it whenever needed.

• Provide Knowledge transfer when a new team member is joined.

Linux Image deployment for POS Devices.

• Build and maintain standardized Linux OS images for Lenovo POS devices.
• When new hardware is released, we need to test the image is working fine on the hardware if any changes are needed then we need to create a new image and test the image before releasing it to production.
• Use ghost application to test and redeploy the image created for the POS devices.
• Use configuration files to run unattended installations using fewer manual efforts.
• Test images in virtual and physical environments before production rollout.
• Ensure post-deployment configuration aligns with organizational standards.

Requirements

Required Skills & Qualifications

• Strong experience with Windows OS imaging tools (MDT, SCCM/MECM DISM, Sysprep, Ghost and FFU).

• Proficiency in PowerShell and batch scripting.

• Understanding of UEFI/BIOS configurations and PXE boot environments in Winpe.

• Experience with endpoint management platforms (SCCM, Intune, Autopilot).

• Knowledge of networking protocols and deployment over LAN/WAN.

• Deep understanding of Windows Server, Active Directory, DNS, and Group Policy.

• Experience with SQL and SCCM/MECM reporting.

• Knowledge of networking protocols (TCP/IP), virtualization, and endpoint security.

• Strong knowledge of Windows Autopilot and Intune.

• Experience with device lifecycle management and cloud-based provisioning.

• Experience in Linux image creation and deployment for POS devices.