SENIOR WINDOWS KIOSK IMAGING EXPERT

Job description

Svitla Systems Inc. is looking for a Senior Windows Kiosk Imaging expert for a part-time position (20 hours per week), fully remote in Europe. Our client operates a fleet of kiosk terminals running Windows 11 IoT Enterprise with a single Unity application in Shell Launcher kiosk mode. You will take the existing master image to a release-ready state and then support and maintain it. This is Windows systems and imaging work — the Unity application itself is built and maintained by another team and is out of scope.

Conditions: Schedule can be adapted to your availability. Workload is front-loaded: bringing the image to a release master is the busiest phase, after which the engagement moves to lighter ongoing image maintenance. Not suitable if you are looking for a steady full-time load. No restrictions on location or citizenship. Access to both hardware board revisions is provided by the client.

Requirements

- 3+ years of proven hands-on experience configuring Windows kiosk mode environments.

- Deep hands-on knowledge of Windows at the operating-system level, including Windows configuration and ISO image creation.

- Experience with Shell Launcher kiosk lockdown and keyboard filtering.

- PowerShell scripting for system provisioning: local accounts, registry policy, ACLs, services, scheduled tasks, and RunOnce.

- Sysprep and unattend.xml answer files, including the generalize pass within a capture workflow.

- Image capture and restore with Clonezilla.

- Driver integration for specific target hardware, including support for multiple board revisions.

- UEFI, Secure Boot, and boot-time branding.

- Windows Update policy management across the reference, capture, and deployment stages.

- Ability to start configuring the environment immediately and be productive from day one — there is no onboarding period or time for learning missing technologies.

- English proficiency sufficient for direct communication with the client's technical lead.

Will be a plus

- Experience shipping locked-down Windows devices in an OEM, kiosk, self-service terminal, digital signage, or industrial HMI context.

- Knowledge of Windows 11 IoT Enterprise / LTSC specifics.

- Unified Write Filter (UWF) and Keyboard Filter WMI classes.

- Secret and credential management on shipped device images.

Responsibilities

- Configure and maintain Windows 11 IoT Enterprise kiosk devices running a Unity application in Shell Launcher kiosk mode.

- Implement kiosk lockdown via Shell Launcher, including keyboard filtering and restricting the kiosk account's capabilities.

- Develop and maintain PowerShell provisioning scripts: local accounts, registry policy, ACLs, services, scheduled tasks, and RunOnce entries.

- Replace the previous generation of provisioning scripts on the image with the current pipeline and remove leftover scheduled tasks from the earlier design.

- Rework the local account structure to use a standard passwordless kiosk user and a password-protected local administrator, and validate peripherals after the change.

- Rework the two-phase autologon handoff, including removal of the plaintext administrator credential after provisioning.

- Author unattend.xml and run the Sysprep generalize pass as part of image capture.

- Implement first-boot provisioning via HKLM RunOnce.

- Perform master image operations, including disk shrinking and extending, image capture and restore with Clonezilla, field backups with Rescuezilla, and packaging as a self-restoring ISO.

- Integrate drivers for the target hardware across two board revisions.

- Work with UEFI, Secure Boot, and a custom boot logo.

- Manage Windows Update behavior consistently on the reference machine, at capture time, and on the deployed device.

- Remediate documented security issues: a plaintext administrator password in a shipped configuration file and an API key and TOTP secret shared fleet-wide in the application's install.xml.

- Validate all work on real kiosk hardware while working directly with the client's technical lead.