Senior Windows Kiosk Imaging Expert

The core job description for the Senior Windows Kiosk Imaging Expert role at Intetics Inc. involves leading and executing Windows kiosk imaging tasks with a focus on boot reliability, lockdown, and reproducible deployments across a fleet.

Requirements

• Must have strong hands-on experience with Windows, including Windows kiosk mode configuration (Shell Launcher) and deep Windows knowledge (imaging, deployment, lockdown, and recovery).
• Proven, practical experience configuring and delivering Windows kiosk environments and master images (Windows 11 IoT Enterprise or similar), including image capture and restore workflows.
• Experience with provisioning, imaging, and recurring maintenance tasks at scale, such as master image creation, sysprep with answer file, disk resizing, and image capture/restore.
• Experience with driver integration for multiple hardware revisions and working with real kiosk hardware (two board revisions).

Nice to have:

• Experience with image/boot workflow tooling beyond Clonezilla (e.g., Rescuezilla) and documented provisioning pipelines.
• Familiarity with securing kiosk devices (lockdown, user rights, RunOnce/first-boot sequencing) and handling security risks in image-based deployments.
• Prior work with documentation-heavy projects (work instructions, handbooks) and ability to provide detailed project descriptions and artifacts.

Responsibilities:

• Lead and execute Windows kiosk imaging tasks for the project, focusing on boot reliability, lockdown, and reproducible deployments across a fleet.
• Implement and maintain provisioning scripts and processes (PowerShell provisioning, registry policies, ACLs, services, RunOnce entries).
• Configure and manage Windows kiosk lockdown via Shell Launcher, including keyboard filtering and restricting user capabilities.
• Perform master image work: implement sysprep with an answer file, perform disk shrink/extend, and manage capture/restore using Clonezilla.
• Integrate drivers for both board revisions; coordinate hardware access to validate driver support.
• Manage boot chain and firmware questions (UEFI, Secure Boot, custom boot logo) and ensure compatibility with the deployment environment.
• Work from reference images, validate changes on real kiosk hardware, and coordinate access to hardware revisions.
• Address in-scope security improvements (e.g., remove plain-text admin passwords from config, mitigate API key/TOTP exposure) and implement secure handling where feasible.
• Maintain and share comprehensive documentation for provisioning, imaging, and deployment processes; participate in on-call discussions and provide timely support.
• Collaborate with the technical lead and other stakeholders; ensure deliverables are tested, documented, and aligned with project goals.
• Ensure productive startup and ongoing reliability, with tasks prioritized to maximize front-loaded work during early project phases.