Compliance & Automation Engineer

Job Responsibilities & Requirements

• Provide Tier III support for endpoint management issues across IT Operations and IT Development Teams
• Design, deploy, and maintain Microsoft Intune policies for device configuration, and compliance
• Manage device enrollment across Windows Autopilot, Apple Business Manager, and Android OS devices
• Administer and maintain Microsoft Endpoint Configuration Manager (MECM/SCCM) and co-management configurations
• Manage, monitor, and maintain Azure Active Directory (Entra ID), including device registration, Hybrid Azure AD Join, and identity-based access controls
• Design and maintain enterprise application packaging workflows, including Win32 app packaging, MSIX/AppX conversion, and LOB app deployment through Intune and MECM
• Develop and maintain PowerShell and scripting solutions to automate application packaging, deployment, and reporting
• Enforce and maintain security baselines, CIS benchmarks, and compliance policies across managed endpoints
• Remediate security vulnerabilities in conjunction with the Information Security Team
• Manage Windows Update for Business, and Windows Auto Patch to ensure compliance reporting numbers are accurate
• Work with vendors to evaluate and deploy new endpoint management solutions

Qualifications

• Bachelor’s degree in information technology; equivalent combination of experience and education may substitute on a year-for-year basis
• 3+ years of experience managing Windows 10/11 enterprise deployments, including Autopilot
• 3+ years of experience designing, deploying, and managing Microsoft Intune in an enterprise environment
• 3+ years of hands-on experience with enterprise application packaging, including Win32, MSIX/AppX, MSI and all other formats
• 2+ years of experience with Microsoft Endpoint Configuration Manager (MECM/SCCM) and co-management
• 2+ years of experience with Azure Active Directory / Microsoft Entra ID
• Extensive experience with PowerShell scripting for packaging automation, silent installs, and deployment troubleshooting
• Extensive experience with PowerShell App Deployment Toolkit (PSADT) for enterprise application packaging, deployment scripting, and end-user interaction management
• 2+ years of experience with Microsoft 365 security and compliance tooling (Defender for Endpoint, Purview, etc.)

Soft Skills

• Must be self-motivated, team oriented and possess strong communication and interpersonal skills
• Must possess strong organizational skills, be detail oriented, and self-motivated with a demonstrated ability to problem solve
• Strong sense of urgency and strong commitment to quality customer service is required
• Able to analyze and interpret data (metrics) to improve the delivery and support of services to our customers

Additional Requirements

• 5% travel may be required