Senior Windows Kiosk Imaging Engineer (Contract, Remote)

About the role

We are looking for a senior Windows systems and imaging engineer to take an existing Windows 11 IoT Enterprise kiosk image from "boots and runs" to a production-ready release master.

The devices run a Unity application in Shell Launcher kiosk mode. A master image already exists on a lab USB stick, but seven items remain open and all seven block deployment. Full documentation for capture, packaging and restore exists and will be shared with you.

This is Windows systems and imaging work, not application development. The Unity application is built and maintained by others. Your side is everything around it: making a device boot into that application reliably, locked down, and reproducibly across a fleet.

What you will work on

• PowerShell provisioning scripts: local accounts, registry policy, ACLs, services, scheduled tasks and RunOnce entries
• Windows kiosk lockdown via Shell Launcher, including keyboard filtering and restricting what the running account can do
• Master image work: sysprep with an answer file, disk shrink and extend, capture and restore with Clonezilla
• Driver integration for the target hardware across two board revisions
• Boot chain and firmware: UEFI, Secure Boot, and a custom boot logo
• Two documented security items: an administrator password stored in plain text inside every image, and a fleet-wide API key and TOTP secret in the application's install.xml

Work is done against a reference machine, then validated on real kiosk hardware.

What we are looking for

• Deep, hands-on Windows expertise at a genuinely senior level: configuration, ISO image creation, deployment
• Proven production experience with Windows kiosk mode configuration, specifically Shell Launcher or Assigned Access
• Practical experience with sysprep, unattend.xml, DISM or WinPE, and image capture and restore workflows
• Driver integration experience across hardware revisions
• Strong PowerShell scripting
• Able to start configuring the environment almost immediately. There is no runway for learning missing technologies or a lengthy onboarding, so you need to be productive from day one
• English at B2 level or above

Engagement details

• Fully remote. No restrictions on location or citizenship
• Minimum 20 hours per week. Full-time or part-time both work during the initial phase
• Availability overlapping 9am to 6pm CET for calls and meetings
• The project is ongoing and the duration cannot be fixed at this stage. The selected candidate will help scope it
• The workload is front-loaded: the first phase (taking the image to a release master) is the busiest period, after which the project moves into lighter ongoing image maintenance. If you are looking for a steady full-time load, this may not be the right fit

How to apply

Please apply with a CV that describes your relevant experience in detail. We need a clear, specific account of the projects where you configured Windows kiosk mode, not a list of technologies. Links to relevant projects are welcome.

• Shortlisted candidates will receive a technical brief covering the seven open items and will be asked to comment on each one based on their own experience.