Manager, Endpoint Engineering

Manager, Endpoint Engineering

The Manager, Endpoint Engineering will lead an engineering team responsible for the security, reliability, management, and support of the Bank's endpoint environment, including Windows, Mac, and mobile devices. This role will guide two closely connected pods: one focused on operational support and management of Windows endpoints using Microsoft Intune, Microsoft Configuration Manager, and related technologies; and another focused on endpoint vulnerability management, patching, compliance, and remediation.

This is an opportunity to shape an integrated endpoint operations model that connects device management, security, patch compliance, and colleague experience in a highly regulated banking environment.

The role includes:

• Leading, coaching, and developing a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.
• Overseeing operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.
• Providing leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.
• Guiding endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.
• Partnering with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.
• Establishing clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.
• Using endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.
• Leading resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.
• Supporting endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.
• Promoting an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

Minimum Qualifications:

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.
• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.
• Hands-on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.
• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk-based prioritization.
• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.
• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.
• Strong communication, analytical, stakeholder management, and escalation leadership skills.
• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

Additional Experience We Value:

• Experience in banking, financial services, or another highly regulated industry.
• Experience with Mac, mobile, Jamf, iOS, Android, or modern device management at enterprise scale.
• Familiarity with Nexthink, DEX platforms, endpoint analytics, or user experience measurement tools.
• Experience partnering with DEX, Service Desk, Desktop, Cyber Security, and Infrastructure teams to improve compute performance, device reliability, supportability, and colleague experience.
• Experience with automation, Power Shell, endpoint reporting, patch automation, compliance dashboards, or operational metrics.
• Relevant Microsoft, Apple, Jamf, ITIL, cybersecurity, or endpoint management certifications.

Pay Transparency

The salary range for this position is $134,000 – $179,000 per year, plus an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience.

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an…