Senior Mobility Engineer - Hybrid - Brentwood, TN

“Lifepoint Health is an Equal Opportunity Employer. Lifepoint Health is committed to Equal Employment Opportunity for all applicants and employees and complies with all applicable laws prohibiting discrimination and harassment in employment.”

You must be authorized to work in the United States without employer sponsorship.

• The Systems Engineer, Senior is responsible for the design, implementation, administration, and optimization of enterprise endpoint management solutions across Windows, mobile, and thin client platforms.
• This role supports Microsoft Intune, Configuration Manager (SCCM), Apple Business Manager, Android Enterprise, and virtual endpoint technologies to ensure secure, scalable, and efficient device management while enhancing the end-user experience.

Work Environment:
Onsite/Hybrid 2-4 days a/wk - Brentwood, TN

Travel Requirements:
Up to 25% travel

• Manage, support, and optimize Microsoft Intune, Microsoft Configuration Manager (SCCM), Apple Business Manager (ABM), and Android Enterprise environments to deliver secure and reliable endpoint management services.
• Design, implement, and maintain endpoint provisioning and deployment solutions, including Windows Autopilot, Operating System Deployment (OSD), Apple Automated Device Enrollment (ADE), Android Zero Touch Enrollment, and thin client provisioning processes.
• Develop, test, and troubleshoot application deployments, software distribution packages, configuration profiles, compliance policies, task sequences, and operating system upgrades across Windows, mobile, and thin client platforms.
• Manage endpoint lifecycle activities including device enrollment, imaging, provisioning, driver management, application packaging, patching, compliance remediation, inventory management, and retirement processes.
• Administer and support Mobile Device Management (MDM) and Mobile Application Management (MAM) solutions for corporate-owned and BYOD devices.
• Support and maintain Network Device Enrollment Service (NDES) infrastructure, SCEP certificate deployments, PKI integrations, and certificate-based authentication services supporting managed endpoints.
• Administer and support Apple Business Manager, including Managed Apple IDs, application licensing, enrollment profiles, and automated device assignment workflows.
• Administer and support Android Enterprise deployments, including Fully Managed, Corporate-Owned Personally Enabled (COPE), Dedicated Device, and Work Profile configurations.
• Design, implement, test, and maintain Intune App Protection Policies (MAM) for managed and unmanaged/BYOD devices, including application access, corporate data protection, data transfer controls, and application-level security requirements.
• Manage and support enterprise thin client infrastructures, including IGEL OS, Dell Wyse, and other virtual desktop endpoint platforms.
• Support virtual workplace technologies and endpoint integrations for Citrix, Azure Virtual Desktop (AVD), and other remote access solutions.
• Lead and support enterprise endpoint modernization initiatives, migration projects, and cloud-based management transformations.
• Monitor device health, deployment success, compliance posture, certificate services, and endpoint performance through reporting, analytics, and monitoring tools.
• Collaborate with cybersecurity teams to implement and maintain security controls, Conditional Access policies, endpoint protection, and Zero Trust initiatives.
• Troubleshoot complex endpoint management, operating system, application deployment, enrollment, authentication, and certificate-related issues.
• Create and maintain technical documentation, standards, architecture diagrams, and operational procedures for…