Manager, Endpoint Engineering

Description

4 Days in the office from any of our locations in Johnston RI, Dallas TX, Nashville TN, Short Hills NJ, Westwood or Medford MA,
Role is not relocation eligible.

The Manager, Endpoint Engineering will lead an engineering team responsible for the security, reliability, management, and support of the Bank’s endpoint environment, including Windows, Mac, and mobile devices. This role will guide two closely connected pods: one focused on operational support and management of Windows endpoints using Microsoft Intune, Microsoft Configuration Manager, and related technologies; and another focused on endpoint vulnerability management, patching, compliance, and remediation.

This is an opportunity to shape an integrated endpoint operations model that connects device management, security, patch compliance, and colleague experience in a highly regulated banking environment.

• Lead, coach, and develop a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.
• Oversee operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.
• Provide leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.
• Guide endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.
• Partner with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.
• Establish clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.
• Use endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.
• Lead resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.
• Support endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.
• Promote an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.
• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.
• Hands-on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.
• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk-based prioritization.
• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.
• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.
• Strong communication, analytical, stakeholder management, and escalation leadership skills.
• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

• Experience in banking, financial services, or another highly regulated industry.
• Experience with Mac, mobile, Jamf, iOS, Android, or modern device management at enterprise scale.
• Familiarity with Nexthink, DEX platforms, endpoint analytics, or user experience measurement tools.
• Experience partnering with DEX, Service Desk, Desktop, Cyber Security, and Infrastructure…