Senior Endpoint Engineer

IT Endpoint Engineer 3

Kwik Trip is seeking an experienced IT Endpoint Engineer 3 to lead the administration, optimization, and future direction of our enterprise endpoint environment. In this role, you will serve as a senior technical resource responsible for endpoint management platforms, security remediation efforts, deployment validation, automation, and advanced support. You will collaborate closely with IT Security, Desktop Support, Service Desk teams, vendors, and technology partners to ensure the reliability, security, and performance of endpoint services across the organization.

What You'll Do

• Lead administration and optimization of enterprise endpoint management platforms, including SCCM/MECM, Microsoft Intune, Workspace ONE, Apple Business Manager, and Google Enterprise Console.
• Maintain and improve SCCM/MECM infrastructure health, performance, and reliability.
• Maintain and optimize our existing SCCM/MECM environment while helping evaluate, design, and implement the next generation of unified endpoint management solutions.
• Evaluate, design, and support next-generation unified endpoint management solutions.
• Create, update, test, and validate software packages, operating system images, drivers, policies, and endpoint configurations.
• Coordinate and validate endpoint deployments, updates, and remediation activities to ensure successful implementation.
• Partner with IT Security to execute vulnerability remediation and endpoint security initiatives.
• Develop and maintain Power Shell scripts, automation solutions, custom reports, and operational tools that improve efficiency.
• Monitor endpoint analytics, compliance reporting, deployment success rates, and inventory data.
• Provide third-level escalation support for complex endpoint, hardware, software, networking, and device management issues.
• Serve as a technical expert for endpoint technologies and enterprise device management best practices.
• Research, recommend, and implement improvements that enhance scalability, reliability, and operational effectiveness.
• Develop and maintain technology roadmaps for Windows, MECM/SCCM, and related endpoint management platforms.
• Create and maintain technical documentation and knowledge base resources.
• Provide guidance, training, and support to Endpoint Administrator/Engineer 1 and 2 roles as needed.
• Collaborate with vendors and cross-functional IT teams to plan and execute endpoint-related initiatives and changes.

What We're Looking For

• Associate degree in Information Systems or a related field, or an equivalent combination of education and hands-on IT experience.
• 4 to 6 years of experience with SCCM/MECM, Microsoft Intune, SQL, and Power Shell.
• 6 or more years of experience supporting Windows operating systems, desktop technologies, and virtual environments.
• Advanced experience administering enterprise endpoint management platforms.
• Strong knowledge of:
• Windows operating systems
• Active Directory and Azure AD
• Group Policy Management
• DNS and DHCP
• Apple Business Manager
• Workspace ONE
• iOS, macOS, and Android device management
• Network infrastructure and virtual environments
• Strong analytical, troubleshooting, diagnostic, and problem-solving skills.
• Excellent communication, customer service, documentation, and organizational abilities.
• Ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Ability to work independently and collaboratively within a team setting.
• Strong attention to detail and commitment to operational excellence.

Even Better If You Have

• Bachelor's degree in Information Systems or a related field.
• Microsoft Certified:
  Endpoint Administrator Associate (MD-102).
• ITIL certification.
• Experience leading enterprise endpoint security remediation efforts.
• Experience managing deployment approvals and large-scale endpoint changes.
• Experience developing endpoint technology roadmaps.
• Advanced experience creating automation, custom reporting, and operational efficiency improvements within MECM or similar platforms.

Work Schedule

Monday through Friday during daytime business hours. This role includes participation in a rotating on-call schedule and may require evening, weekend, or after-hours support for escalations, deployments, remediation efforts, and other endpoint service needs.