Senior Infrastructure Engineer – Intune/Shell Scripting/End User Compute

Desired Qualifications

• 4 - 5+ years in infrastructure engineering with strong focus on Windows OS engineering in enterprise environments.
• Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service).
• Strong hands-on experience with modern endpoint management technologies:
• Azure AD / Entra ID
• Zero Trust
• Certificate services
• Advanced PowerShell engineering skills, including:
• Modular script design
• Strong logging & telemetry
• Error handling & retry logic
• Idempotent execution patterns
• Secure credential handling
• Use of Microsoft Graph & REST APIs
• Experience managing OS lifecycle at scale—feature update flights, ring management, controlled rollout, and rollback plans.
• Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions.
• Familiarity with CI/CD concepts:
• Git/Git branching strategies
• Automated validation pipelines
• Shift left testing
• Artifact versioning
• Infrastructure-as-code or configuration-as-code patterns (where applicable)
• Knowledge of observability for endpoints:
• Log Analytics
• KQL
• Performance troubleshooting
• Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware.
• Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles.
• Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers.
• Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement.
• Hands‑on experience with Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform
• Awareness of leveraging AI for day‑to‑day engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency.
• Job Expectations:
• Participate in high level technical concepts spanning technology and business
• Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence).
• Create and maintain hardware driver strategy and compatibility matrices across OEM models
• Own OS-level configuration standards (services, startup, performance tuning, reliability settings).
• Ensure consistent OS experience across device types
• Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove).
• Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations).
• Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid)
• Improve end-user experience through automation and reduction of provisioning time.
• Engineer monthly patching and feature update strategy aligned to business risk and change windows.
• Manage update rings, rollout waves, deferrals, validation gates, and rollback plans.
• Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable).
• Engineer and support standard OS builds (base images / reference images / provisioning packages).
• Build and maintain automation using PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred).
• Reduce manual operational work by designing self-service and self-healing solutions.

Posting End Date

We Value Equal Opportunity

Applicants with Disabilities

Drug and Alcohol Policy

Wells Fargo Recruitment and Hiring Requirements

• a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
• b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.