Endpoint Engineer

The Endpoint Engineer is responsible for the design, engineering, security, automation, and lifecycle management of enterprise Windows and Apple endpoints.

This role serves as a technical subject matter expert for Microsoft Intune, SCCM/MECM, Windows Autopilot, Jamf Pro, endpoint provisioning, security configuration, and Endpoint Privilege Management (EPM).

The engineer will lead initiatives to modernize endpoint management, transition legacy management capabilities toward cloud-native solutions, improve endpoint security, automate provisioning and remediation, and establish scalable endpoint engineering standards across the enterprise.

• Design, engineer, and maintain enterprise endpoint management solutions using Microsoft Intune, SCCM/MECM, Jamf Pro, and Windows Autopilot.
• Serve as a technical SME for Windows and macOS endpoint architecture, management, provisioning, security, and troubleshooting.
• Lead the modernization and migration of traditional SCCM workloads toward Intune and cloud-native endpoint management.
• Design and maintain Intune configuration profiles, compliance policies, security baselines, device restrictions, and remediation solutions.
• Architect and optimize Windows Autopilot and Apple Automated Device Enrollment to provide standardized zero-touch provisioning.
• Engineer SCCM/Intune co-management solutions and determine appropriate workload migration strategies.
• Administer and engineer Jamf Pro for enterprise macOS management, including configuration, application deployment, FileVault, security policies, scripting, and automated provisioning.
• Design endpoint security standards using technologies including Microsoft Defender for Endpoint, BitLocker, FileVault, Attack Surface Reduction, Windows Firewall, device control, application control, and security baselines.
• Design and implement Microsoft Intune Endpoint Privilege Management (EPM) to reduce permanent local administrator access and enforce least-privilege principles.
• Develop and maintain application packaging and deployment solutions across Intune, SCCM, and Jamf.
• Develop automation using PowerShell, Microsoft Graph API, Graph PowerShell SDK, REST APIs, and shell scripting.
• Automate device provisioning, application deployment, configuration validation, compliance reporting, security remediation, inventory, and endpoint lifecycle activities.
• Integrate endpoint compliance and security controls with Microsoft Entra ID and Conditional Access.