Senior Endpoint Engineer

Provide hands‑on technical leadership, architecture, design review, and practical guidance without formal direct‑report or performance‑management responsibility.
Establish platform priorities, service ownership, technical standards, cross‑training, escalation coverage, and an executable roadmap.
Serve as technical authority and senior escalation point for enterprise endpoint management.
Own endpoint engineering documentation, change control, testing and rollback standards, support handoffs, knowledge transfer, and cross‑training.
Establish service metrics and use operational reviews to drive reliability, security, and continuous improvement.
Define and maintain Windows endpoint standards, configuration profiles, security baselines, compliance policies, assignment groups, role‑based access, and policy exceptions.
Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre‑provisioning, reset, redeployment, and zero‑touch workflows.
Design enrollment and migration patterns for Microsoft Entra join, hybrid Entra join, automatic MDM enrollment, and legacy‑device transition.
Own enterprise management of Mac, iPhone, and iPad devices through Microsoft Intune and Apple Business Manager.
Own the application packaging lifecycle in Intune, including Win
32 packages, PSADT, detection rules, dependencies, supersedence, testing, assignments, remediation, and retirement.
Use Patch My PC to publish and maintain third‑party and specialized applications through Intune.
Develop delivery patterns for large and specialized AEC applications, including Autodesk AutoCAD and Bentley products.
Manage Windows Autopatch and update‑ring strategy; monitor results and remediate failures and policy exceptions.
Build and maintain Power Shell, Microsoft Graph, proactive‑remediation, API‑based, and governed AI‑assisted automation.
Partner with Cybersecurity on Defender for Endpoint, Bit Locker, Windows LAPS, Conditional Access, endpoint security policies, and vulnerability remediation.
Develop dashboards and reports for enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation performance.
Maintain authoritative endpoint inventory across identity, device‑management, service‑management, procurement, and vendor systems.
Set standards for endpoint models, warranties, leasing, refresh, recovery, reuse, retirement, and secure disposition.
Own architecture, standards, lifecycle, monitoring, documentation, and vendor coordination for Microsoft Teams Rooms.
Govern Trilon's copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, metrics, and replacement strategy.
Use monitoring, service data, root‑cause analysis, automation, and runbooks to improve workplace technology reliability and user experience.
Lead endpoint discovery, assessment, planning, and migration for newly acquired firms.
Define phased integration plans and partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations.
Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders.

• 7 or more years of endpoint management, systems engineering, or modern workplace experience, including hands‑on responsibility for managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment.
• Demonstrated technical leadership, sound judgment, ability to influence technical peers, establish standards, coordinate across teams, and communicate clearly without formal reporting authority.
• Expert‑level hands‑on experience with Microsoft Intune, Windows Autopilot, Microsoft Entra e management, Windows 11, and endpoint policy…