Senior Digital Workspace Engineer

Senior Digital Workspace Engineer

Oncourse Home Solutions, also operated as American Water Resources, is a trusted home protection provider helping homeowners across the country protect what matters most. We are a $500 million organization backed by private equity firm Apax Partners, serving 2 million customers across 43 states. We partner with 25+ utilities and municipalities (and growing!) to provide customized solutions tailored to any community - delivering real value where people live.

We help homeowners protect the essential systems that keep their homes running - from HVAC, appliances, and electrical to water, sewer, gas lines, and more - so they can avoid the stress and financial impact of unexpected repairs. Our work helps homeowners stay safe, comfortable, and confident in their homes every day. At Oncourse, our people are what makes that possible.

We call ourselves SUPERs
- Successful, United, Progressive, Empathetic, and Reliable - because that's how we show up for our customers and for each other. We invest in our employees through competitive benefits, an inclusive culture, and employee-led resource groups that strengthen connection, community, and belonging across the company. As an equal opportunity employer, our employment decisions are based on business needs, job requirements and individual qualifications without regard to race, color, religion, age, sex (including pregnancy), sexual orientation, gender identity, national origin, ancestry, marital status, parental status, mental or physical disability, military or veteran status, or any other basis protected by federal, state, or local law.

Oncourse Home Solutions is committed to recruiting and retaining talented applicants and to providing all employees with a workplace free from discrimination and/or harassment.

Position Summary:

The Sr. Digital Workspace Engineer owns the full lifecycle of Oncourse Home Solutions' enterprise endpoint environment — spanning Windows and macOS devices, identity-driven access controls, M365 security tooling, and automation-first operations. This is a senior hands-on technical role operating at the intersection of endpoint engineering, cybersecurity, and operational delivery. The role requires deep expertise across Microsoft Intune, Jamf Pro, Microsoft Entra , Defender for Endpoint, and Microsoft Purview, paired with the stakeholder presence to support VIP users, contact center operations, and executive leadership.

The engineer will design and operate endpoint platforms that are resilient, secure by design, and automated at every opportunity. Located at our office in Naperville, IL. Our office environment is a key driver of our company culture and employee experience, so a regular in-office hybrid model (generally T-TH in office and M & F remote) is required.

Responsibilities include but are not limited to:

• Endpoint Lifecycle Management
• Identity and Conditional Access
• M365 Security Operations
• Scripting and Automation
• Networking and Connectivity
• Contact Center and Critical Operations
• VIP and Executive Support
• AI Tooling and Governance
• Security Hardening and Compliance
• Asset Management and CMDB
• On-Call Support

We're Excited if this is You! Experience and Qualifications of the Role:

7+ years of enterprise endpoint engineering experience in mid-to-large organizations. Deep hands-on expertise with Microsoft Intune (MEM) — MDM and MAM policy design, compliance, app deployment, Autopilot (device registration, ESP tuning, User-Driven / Self-Deploying / Pre-Provisioning models), zero-touch large-scale rollouts, and mobile platform enrollment (iOS, Android, macOS). Proven MDM expertise across corporate-owned and BYOD programs — iOS, Android, and macOS enrollment, compliance policies, conditional access for mobile, and Intune App Protection Policies (MAM without enrollment).

Deep hands-on expertise with Jamf Pro — smart groups, policies, packages, Jamf Connect, and remote management. Proficiency in Microsoft Entra e registration, hybrid join, Conditional Access, named locations, sign-in risk policies, and Privileged Identity Management (PIM) for just-in-time administrative access governance. Proven expertise in M365…