Senior Windows Endpoint Engineer

We believe our people are the key to our success. At Brooksource, we’re committed to helping our talented professionals grow. Whenever possible, we prioritize internal talent for open positions before recruiting externally.

Reporting to the End User Computing / Workplace Services leadership team, this role will provide senior engineering ownership for the Windows workstation platform, including build standards, deployment methods, software packaging, endpoint patching, vulnerability remediation, performance analysis, and level 3 endpoint support. This individual will play a key role in endpoint management modernization initiatives, Windows operating system upgrades, endpoint observability, and enterprise tooling while advancing platform reliability, security, and operational excellence.

• Engineer and maintain Windows workstation build standards, operating system upgrade plans, driver/firmware processes, software packaging, and deployment readiness.
• Provide level 3 technical support for complex Windows endpoint issues, recurring workstation performance degradation, endpoint reliability concerns, and hard-to-resolve field escalations.
• Support Windows patching, vulnerability remediation, compliance baselines, and configuration standards in partnership with security and infrastructure teams.
• Lead or support SCCM, Intune, Autopilot, co-management, and cloud-management modernization efforts as part of a broader SCCM-to-Intune journey.
• Use endpoint monitoring and management data to identify patterns, isolate root causes, prioritize remediation, and verify that corrective actions improve user experience.
• Develop repeatable technical runbooks, engineering documentation, field support guidance, and operational handoffs for Windows endpoint processes.
• Partner with Field Operations, Service Desk, security, networking, and application teams to separate endpoint, application, network, and security-tool impacts during investigations.
• Participate in pilot deployments, early adopter rings, change management, validation plans, and post-deployment monitoring for Windows platform changes.
• Support evaluation and adoption of endpoint management or performance platforms, with Tanium experience strongly preferred and Aternity/Nexthink-style observability experience beneficial.

• Deep experience with Windows 10/11 enterprise endpoint engineering, device lifecycle, OS build, imaging, driver management, patching, configuration baselines, and workstation troubleshooting.
• Hands-on experience with Microsoft Configuration Manager/SCCM, Microsoft Intune, Windows Autopilot, Group Policy, Entra e concepts, and endpoint compliance reporting.
• Preferred experience with Tanium for endpoint visibility, inventory, patching, performance analysis, vulnerability investigation, or remediation workflows.
• Strong scripting and automation skills using Power Shell or comparable tools to reduce manual work and improve support consistency.
• Ability to interpret endpoint telemetry, event logs, performance counters, agent behavior, boot/logon data, and software conflicts to drive root-cause analysis.
• Strong communication skills with the ability to brief Field Operations, Service Desk, technology leadership, and security stakeholders on technical risks and actions.
• Experience operating in a change-controlled enterprise environment with documented testing, validation, and rollback planning.

• BS and 8+ years of relevant Windows endpoint engineering, desktop platform, infrastructure operations, or equivalent experience.
• 7+ years of Windows OS, Microsoft endpoint management, packaging, deployment, and enterprise workstation support experience.
• Experience supporting large, distributed enterprise environments and partnering with field support or service desk organizations.
• Tanium experience preferred; experience with complementary endpoint management, vulnerability, or digital employee experience tools also valuable.
• Experience with regulated enterprise controls, change management, audit evidence, vulnerability remediation, or operational risk processes preferred.

Brooksource, Medasource, and…