Endpoint Engineer

• Implement, administer, and continuously optimize Microsoft Intune and Endpoint Manager platforms for Windows, mobile, and remote workforce devices
• Design and implement configuration profiles, compliance policies, and conditional access controls
• Package, deploy, and maintain applications using Intune and automated deployment tools
• Monitor endpoint compliance and security posture through patching, antivirus protection, encryption, security policies, and remediation initiatives
• Manage mobile device enrollment, application protection policies, and BYOD strategies
• Integrate Intune with Azure AD, Microsoft Defender, SIEM tools, and other enterprise systems
• Develop and deliver compliance, device health, patch status, software inventory, and audit readiness reports to leadership
• Identify trends and recommend corrective actions
• Provide escalation support for endpoint and Intune-related issues
• Collaborate with Service Desk and Infrastructure teams to resolve complex incidents and improve support processes
• Participate in change management, test new configurations, and ensure controlled rollouts
• Evaluate, recommend, and implement modern endpoint management practices, including Autopilot, zero-touch provisioning, and cloud-first strategies
• Function as an individual contributor with no supervisory responsibilities

• Bachelor’s Degree from an accredited institution in Computer Science, Engineering or related field
• At least three (3) years of experience in endpoint management or systems engineering
• At least two (2) years of administering Microsoft Intune/Endpoint Manager technology
• Experience designing and supporting modern endpoint management and security solutions including Entra  (Azure AD), Autopilot, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust architectures
• Microsoft certifications such as MD-102, Endpoint Administrator Associate
• Strong knowledge of Microsoft Endpoint Manager (Intune) and modern device management
• Advanced understanding of operating systems (e.g. Windows, iOS, Android) and endpoint lifecycle
• Advanced knowledge of patch management, compliance frameworks, and security standards
• Familiarity with ITSM tools and ticketing systems
• Ability to maintain documentation, standards, and technical procedures related to endpoint engineering, device security, and lifecycle management
• Ability to multi-task and prioritize multiple requests within ticketing systems and leadership direction
• Ability to analyze technical data, troubleshoot complex issues, and implement effective solutions
• Effective written and verbal communication skills
• Available for on-call responsibilities on weekends and holidays for urgent issues or emergencies during off hours, as needed
• Minimally lift, push, carry and/or move up to 35 pounds
• Regular travel may be required to other locations; approximate overnight travel is 15%

Demonstrates expertise in Microsoft Intune and Endpoint Manager for managing and securing endpoint devices, with a strong focus on compliance, patch management, and integration with Azure AD and Microsoft Defender. Capable of analyzing technical data and troubleshooting complex issues while maintaining effective communication and documentation standards.

• Microsoft Intune Administration
• Endpoint Management
• Azure AD Integration
• Patch Management
• Microsoft Certifications (MD-102)

• Endpoint Lifecycle Management
• Configuration Profiles
• Compliance Policies
• Conditional Access Controls
• Application Packaging and Deployment
• Security Policies
• Remediation Initiatives
• Zero Trust Architectures
• Autopilot
• Device Health Reporting

• Effective Communication
• Multi-tasking
• Analytical Problem Solving

• MD-102
• Endpoint Administrator Associate

• Endpoint Security
• BYOD Strategies
• Change Management
• Compliance Frameworks
• Technical Documentation

• Microsoft Defender for Endpoint
• SIEM Tools
• ITSM Tools
• Ticketing Systems