Modern Endpoint Engineer

Overview

Health Partners is currently hiring a Modern Endpoint Engineer to join our Infrastructure Deployment Services team. In this role, the individual is responsible for designing, deploying, securing, and managing the enterprise’s modern workplace ecosystem. The position leverages Configuration Manager (on-prem), Microsoft Endpoint Manager (Intune), Azure Active Directory, and related technologies to deliver reliable application deployment, effective patch management, and a secure, productive end-user experience.

The role is well suited for a professional who thrives in a fast-paced enterprise environment and values automation, standardization, and continuous improvement.

This position reports to the Manager of Infrastructure Deployment Services and is part of an eight-person team that includes a QA Manager, SMS Administrators, Engineers, and an Analyst.

• Bachelor’s degree or equivalent professional experience
• Four (4) years of experience performing Client Service Administration
• Six (6) years of IT experience
• Professional experience with Microsoft Endpoint Manager (Intune) and Configuration Manager
• Expert in troubleshooting device setup, policy conflicts, app deployment, and OS issues
• Strong experience providing excellent IT services within IT and to business partners.
• Familiarity with enterprise collaboration platforms: M365 Apps, One Drive, Teams
• Experience calculating capacity needs.
• Skilled in large-scale deployment planning
• Basic network knowledge
• Ability to communicate clearly with technical and non-technical audiences.
• Excellent documentation skills (SOPs, deployment guides, change records)
• Strong analytical and troubleshooting skills with a methodical approach.
• Comprehensive knowledge of both macOS and Windows desktop operating systems
• Overall understanding of IT infrastructure
• General understanding of Service Administration
• Able to be on call 24 x7.

• Microsoft 365 administration and MS Graph API
• Develop dashboards and reporting (Intune, Defender, Power BI, compliance)
• Experience with Entra and on-prem AD and hybrid-join environments
• Power Shell scripting with hands-on experience using the Power Shell App Deployment Toolkit (PSADT)
• Experience with Service Now, Jira, or other ITSM platforms
• Jamf:
  Apple device management

• M-F; core business hours
• This role participates in a one-week on-call rotation, scheduled approximately every fifth week.
• This position offers a flexible hybrid work arrangement, combining onsite and remote work.

• Device & OS Management
  • Manage and optimize Microsoft Intune / Endpoint Manager policies, configuration profiles, compliance baselines, and app deployments.
  • Administer Windows updates via Windows Autopatch
  • Lead OS lifecycle planning, builds, security baselines, and patching strategies.
• Automation & Operational Efficiency
  • Build and maintain automated workflows using Power Shell, Graph API, and Intune management tools.
  • Standardize configurations, implement structured build processes, and leverage automated deployment solutions to minimize operational workload.
• Security & Compliance
  • Implement and maintain security baselines and hardening standards (Defender, Bit Locker, Conditional Access, Zero Trust principles)
  • Partner with Security teams to identify vulnerabilities, improve posture, and support compliance initiatives.
• Application Management
  • Package, deploy, and maintain modern applications using Configuration Manager and Intune Win
    32 app packaging.
  • Troubleshoot application deployment failures and end-user impact.
• Support & Troubleshooting
  • Function as an escalation point for complex endpoint issues.
  • Monitor environment health, perform root-cause analysis, and implement corrective actions.
  • Provide guidance and documentation to support teams and end-users.
• Collaboration & Strategy
  • Work closely with Infrastructure, Security, and Service Desk teams to deliver a world-class end-user experience.
  • Contribute to roadmap planning related to endpoint management, device strategy, and modernization initiatives.