Endpoint Engineer, Technology & Security

Our Company

Oaktree is a leader among global investment managers specializing in alternative investments, with more than $220 billion in assets under management. The firm emphasizes an opportunistic, value-oriented, and risk-controlled approach to investments in credit, equity, and real estate. The firm has more than 1,400 employees and offices in more than 25 cities worldwide.

Oaktree is a leader among global investment managers specializing in alternative investments, with more than $220 billion in assets under management. The firm emphasizes an opportunistic, value-oriented, and risk-controlled approach to investments in credit, equity, and real estate. The firm has more than 1,400 employees and offices in more than 25 cities worldwide.

We are committed to cultivating an environment that is collaborative, curious, inclusive and honors diversity of thought. Providing training and career development opportunities and emphasizing strong support for our local communities through philanthropic initiatives are essential to our culture.

For additional information, please visit Oaktree’s website at

Oaktree is seeking a highly motivated and technical Endpoint Engineer to support the Information Security team at Oaktree.

• Own and continuously improve the modern endpoint management platform, including Microsoft Intune, Windows Autopilot, Microsoft Entra , and related technologies.
• Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, OS upgrades, troubleshooting, and retirement.
• Lead the transition from SCCM/MECM and Group Policy–based management to modern, cloud-native endpoint management, including decommissioning legacy infrastructure.
• Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and operational consistency.

• Design, implement, and optimize Intune configuration profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.
• Support Microsoft Entra joined, hybrid-joined, co-managed, and cloud-native device management scenarios.
• Develop standardized processes for device provisioning, refresh, rebuilds, feature updates, and hardware lifecycle management.

• Implement and maintain endpoint security controls, including Bit Locker, Microsoft Defender, Windows LAPS, Windows Hello for Business, firewall policies, attack surface reduction rules, and security baselines.
• Configure and monitor compliance policies to ensure devices meet organizational security requirements.

• Package, deploy, test, and support applications using Intune, Win
  32 app deployment, Microsoft Store, Power Shell, and enterprise software distribution tools.
• Plan and execute Windows feature updates and OS migrations, including readiness assessments, pilot deployments, issue remediation, reporting, and production rollouts.
• Develop scripts, detection rules, remediation packages, and automation to improve operational efficiency.

• Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.
• Diagnose and resolve issues using endpoint logs, Intune reporting, Autopilot diagnostics, Power Shell, Event Viewer, SCCM client logs, and Entra device records.
• Participate in incident response, change management, root cause analysis, and continuous service improvement.

• Maintain documentation for endpoint architecture, standards, policies, deployment processes, application packaging, and support procedures.
• Partner with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams to deliver endpoint initiatives.
• Support audits, compliance efforts, risk assessments, and endpoint modernization projects.

• 5+ years of relevant experience
• Strong troubleshooting skills across Windows OS, device…