Senior Endpoint Engineer

• Serve as the senior technical owner and escalation point for Trilon’s workplace endpoint ecosystem
• Lead endpoint architecture, modernization, standards, and reliable operation across Windows, Apple devices, Microsoft Teams Rooms, and copier/plotter fleets
• Design and operate endpoint management through Microsoft Intune, Windows Autopilot, Windows Autopatch, Patch My PC, Microsoft Entra , Apple Business Manager, and related technologies
• Establish platform priorities, technical standards, service ownership, escalation coverage, roadmaps, documentation, change control, testing, rollback, and cross-training
• Define Windows endpoint configuration profiles, security baselines, compliance policies, assignment groups, role-based access, and policy exceptions
• Own Windows and Apple enrollment, migration, configuration, compliance, security, application delivery, updates, lifecycle, and zero-touch deployment
• Own Intune application packaging, third-party patching, deployment models, remediation, and retirement
• Develop Power Shell, Microsoft Graph, proactive-remediation, API-based, and governed AI-assisted automation
• Partner with Cybersecurity on Defender for Endpoint, Bit Locker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
• Develop dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation
• Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
• Set standards for hardware models, warranties, leasing, refresh, recovery, reuse, retirement, and secure disposition
• Own architecture, lifecycle, monitoring, documentation, and vendor coordination for Microsoft Teams Rooms
• Govern Trilon’s copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, usage, and service metrics
• Lead endpoint discovery, planning, and migration for newly acquired firms
• Partner with Service Delivery and Field Support on onboarding, offboarding, office openings, relocations, refresh events, and escalations
• Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

• 7 or more years of endpoint management, systems engineering, or modern workplace experience
• Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
• Demonstrated technical leadership, sound judgment, influence, standards-setting, cross-team coordination, and clear communication without formal reporting authority
• Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra e management, Windows 11, and endpoint policy architecture
• Enterprise software packaging and delivery experience, including Win
  32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
• Experience with Power Shell App Deployment Toolkit (PSADT) strongly preferred
• Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation
• Patch My PC experience strongly preferred
• Advanced Power Shell skills and practical Microsoft Graph or other API experience
• Understanding of Microsoft Defender for Endpoint, Bit Locker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
• Experience supporting complex distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
• Ability to reconcile data across device-management, identity, asset, remote-support, and service-management systems
• Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
• Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
• Experience engineering or governing Microsoft Teams Rooms strongly preferred
• Experience governing an enterprise copier, printer, or plotter fleet preferred
• Experience with endpoint equipment warehousing and depot operations preferred
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, preferred

Demonstrates extensive expertise in endpoint management and architecture, particularly with Microsoft Intune, Windows Autopilot, and Apple Business Manager. Proven ability to lead technical initiatives, establish standards, and ensure…