SENIOR WINDOWS KIOSK IMAGING EXPERT

Svitla Systems Inc. is looking for a Senior Windows Kiosk Imaging expert for a part-time position (20 hours per week), fully remote in Europe. Our client operates a fleet of kiosk terminals running Windows 11 IoT Enterprise with a single Unity application in Shell Launcher kiosk mode. You will take the existing master image to a release-ready state and then support and maintain it. This is Windows systems and imaging work - the Unity application itself is built and maintained by another team and is out of scope.

Conditions: Schedule can be adapted to your availability. Workload is front-loaded: bringing the image to a release master is the busiest phase, after which the engagement moves to lighter ongoing image maintenance. Not suitable if you are looking for a steady full-time load. No restrictions on location or citizenship. Access to both hardware board revisions is provided by the client.

• 3+ years of proven hands-on experience configuring Windows kiosk mode environments.
• Deep hands-on knowledge of Windows at the operating-system level, including Windows configuration and ISO image creation.
• Experience with Shell Launcher kiosk lockdown and keyboard filtering.
• PowerShell scripting for system provisioning: local accounts, registry policy, ACLs, services, scheduled tasks, and RunOnce.
• Sysprep and unattend.xml answer files, including the generalize pass within a capture workflow.
• Image capture and restore with Clonezilla.
• Driver integration for specific target hardware, including support for multiple board revisions.
• UEFI, Secure Boot, and boot-time branding.
• Windows Update policy management across the reference, capture, and deployment stages.
• Ability to start configuring the environment immediately and be productive from day one - there is no onboarding period or time for learning missing technologies.
• English proficiency sufficient for direct communication with the client's technical lead.
• Experience shipping locked-down Windows devices in an OEM, kiosk, self-service terminal, digital signage, or industrial HMI context.
• Knowledge of Windows 11 IoT Enterprise / LTSC specifics.
• Unified Write Filter (UWF) and Keyboard Filter WMI classes.
• Secret and credential management on shipped device images.
• Configure and maintain Windows 11 IoT Enterprise kiosk devices running a Unity application in Shell Launcher kiosk mode.
• Implement kiosk lockdown via Shell Launcher, including keyboard filtering and restricting the kiosk account's capabilities.
• Develop and maintain PowerShell provisioning scripts: local accounts, registry policy, ACLs, services, scheduled tasks, and RunOnce entries.
• Replace the previous generation of provisioning scripts on the image with the current pipeline and remove leftover scheduled tasks from the earlier design.
• Rework the local account structure to use a standard passwordless kiosk user and a password-protected local administrator, and validate peripherals after the change.
• Rework the two-phase autologon handoff, including removal of the plaintext administrator credential after provisioning.
• Author unattend.xml and run the Sysprep generalize pass as part of image capture.
• Implement first-boot provisioning via HKLM RunOnce.
• Perform master image operations, including disk shrinking and extending, image capture and restore with Clonezilla, field backups with Rescuezilla, and packaging as a self-restoring ISO.
• Integrate drivers for the target hardware across two board revisions.
• Work with UEFI, Secure Boot, and a custom boot logo.
• Manage Windows Update behavior consistently on the reference machine, at capture time, and on the deployed device.
• Remediate documented security issues: a plaintext administrator password in a shipped configuration file and an API key and TOTP secret shared fleet-wide in the application's install.xml.
• Validate all work on real kiosk hardware while working directly with the client's technical lead.