Senior Endpoint Automation Engineer

Senior Endpoint Automation Engineer

MSA Professional Services is seeking a Senior Endpoint Automation Engineer to modernize and optimize how technology is delivered and managed across our organization. This role is responsible for designing, automating, securing, and managing MSA's endpoint ecosystem across on-premises and cloud environments, including Microsoft 365 and Azure.

You'll combine deep endpoint engineering expertise with automation to reduce manual support, standardize device management, and create a better technology experience for MSA employee-owners. From zero-touch provisioning and automated onboarding to endpoint security and lifecycle management, you'll have the opportunity to identify opportunities, build scalable solutions, and help shape MSA's endpoint automation strategy.

This role can be onsite, hybrid or remote within driving distance of any of our offices in WI, IL, IA, MN or FL.

MSA Professional Services is 100% employee-owned, meaning every employee has a direct stake in the success of the company. This ownership mindset drives our collaborative culture, long-term thinking, and commitment to delivering high-quality work for the communities we serve.

Come join the ownership team at MSA!

Employee Testimonial: "As an employee-owned company (100% ESOP), working at MSA is not just a job. We're genuine co-owners, and this ESOP setup promotes a culture of collaboration and engagement throughout MSA because we all have a direct financial interest as owners."

-Project Engineer Transportation, Cedar Rapids Office

Endpoint Engineering & Automation

• Develop and maintain MSA's endpoint automation strategy, standards, and best practices, including provisioning, configuration, compliance, security, and lifecycle management.
• Administer and optimize endpoint technologies including Microsoft Intune, Autopilot, MECM/SCCM, PDQ, and JAMF, as applicable.
• Build and maintain Power Shell scripts, automated workflows, software deployments, patch management, and zero/low-touch solutions for onboarding, offboarding, device refreshes, and user migrations.

Security, Governance & Modernization

• Monitor endpoint health, performance, compliance, and security; troubleshoot complex issues and implement scalable solutions.
• Partner with MSA's Security and Data Governance teams to incorporate security, compliance, and governance best practices into endpoint solutions.
• Research and implement emerging endpoint management and automation technologies that improve security, scalability, efficiency, and employee experience.

Technology Partnership & Support

• Serve as an escalation point and technical resource for complex endpoint, automation, and device management issues.
• Partner with the Help Desk and business stakeholders to identify recurring challenges and develop automation, self-service, and process improvements.
• Develop technical documentation, standards, and implementation guides, and provide training to employees within and outside of IT as appropriate.

Project Leadership

• Identify and lead projects that modernize MSA's endpoint infrastructure, security, software, and automation capabilities.
• Collaborate with IT and business stakeholders to establish project requirements, priorities, and solutions while communicating progress throughout implementation.
• Lead technology modernization efforts and support organizational adoption, including after-hours maintenance, deployments, troubleshooting, and emergency support as needed.

Education

• Bachelor of Science degree in Information Science, Computer Science, a related field, or equivalent work experience required

Certifications Preferred

• Microsoft Endpoint Administrator Associate (MD-102)
• Identity and Access Administrator Associate (SC-300)

Experience

• 10+ years of experience in the Information Technology industry
• 5+ years of experience in endpoint engineering, desktop systems engineering, or related roles

• Expert knowledge of Microsoft Intune, MECM/SCCM, Windows Autopilot, and enterprise endpoint management platforms.
• Advanced knowledge of Windows, Microsoft 365, Entra , Active Directory, Group Policy, and endpoint security.
• Strong Power Shell scripting and automation experience, including software packaging, application deployment, patching, and configuration management.
• Experience with endpoint security and compliance, including security hardening, lifecycle management, and EDR technologies such as Crowd Strike Falcon.
• Experience designing zero/low-touch provisioning and automated endpoint processes, including onboarding, offboarding, device refreshes, and user migrations.
• Experience with Azure Automation, Power Automate, or similar platforms; familiarity with macOS and mobile device management is a plus.

• Lead technology modernization initiatives and help drive adoption of new endpoint solutions and processes.
• Partner effectively with IT, business stakeholders, and leaders at all levels to identify needs and deliver scalable solutions.
• Work…