Windows Kiosk Imaging Expert

Intetics Inc., a global technology company providing custom software application development, distributed professional teams, software product quality assessment, and “all-things-digital” solutions, is seeking a highly skilled and experienced Senior Windows Kiosk Imaging Expert to join our dynamic team on a full-time basis.

Requirements

• Strong hands-on experience with Windows, including Windows kiosk mode configuration (Shell Launcher) and deep Windows knowledge (imaging, deployment, lockdown, and recovery).
• Proven, practical experience configuring and delivering Windows kiosk environments and master images (Windows 11 IoT Enterprise or similar, if applicable), including image capture and restore workflows.
• Experience with provisioning, imaging, and recurring maintenance tasks at scale (master image creation, sysprep with answer file, disk resizing, and image capture/restore).
• Experience with driver integration for multiple hardware revisions and working with real kiosk hardware (two board revisions).

Nice to have:

• Experience with image/boot workflow tooling beyond Clonezilla (e.g., Rescuezilla) and documented provisioning pipelines.
• Familiarity with securing kiosk devices (lockdown, user rights, RunOnce/first-boot sequencing) and handling security risks in image-based deployments.
• Prior work with documentation-heavy projects (work instructions, handbooks) and ability to provide detailed project descriptions and artifacts.

Responsibilities:

• Lead and execute Windows kiosk imaging tasks for the project, focusing on boot reliability, lockdown, and reproducible deployments across a fleet.
• Implement and maintain provisioning scripts and processes (powerShell provisioning, registry policies, ACLs, services, RunOnce entries).
• Configure and manage Windows kiosk lockdown via Shell Launcher, including keyboard filtering and restricting user capabilities.
• Perform master image work: implement sysprep with an answer file, perform disk shrink/extend, and manage capture/restore using Clonezilla.
• Integrate drivers for both board revisions; coordinate hardware access to validate driver support.
• Manage boot chain and firmware questions (UEFI, Secure Boot, custom boot logo) and ensure compatibility with the deployment environment.
• Work from reference images, validate changes on real kiosk hardware, and coordinate access to hardware revisions (item 6 is a hard blocker).
• Address in-scope security improvements (e.g., remove plain-text admin passwords from config, mitigate API key/TOTP exposure) and implement secure handling where feasible.