Endpoint Engineer (Windows & MacOS)

About the role

The Endpoint Engineer II will play a crucial role in managing and maintaining endpoint devices, ensuring they perform optimally, securely, and comply with organizational standards.

Responsibilities

• Manage and maintain endpoint devices, ensuring their optimal performance, security, and compliance with organizational standards.
• Design and develop Microsoft Endpoint Configuration Manager (MECM), Intune, and Jamf Pro solutions for application distribution, configuration management, asset management, and other endpoint lifecycle capabilities following the least privilege security model.
• Script to automate management of Windows endpoints and user data migration to new computers.
• Design, test, and implement configuration, compliance, and conditional access policies within Azure.
• Design, test, and implement Active Directory and/or Azure Group Policies.
• Design, test, and implement Virtual Desktop solutions.
• Ensure adherence to endpoint security best practices, including antivirus, encryption, and patch management.
• Provide operational guidance to the enterprise on endpoint management platforms.
• Conduct assessments of the current environment to detect critical deficiencies and recommend solutions for improvement.
• Utilize capability modeling to align systems strategy and planning with business strategy and goals.
• Consult with project teams to identify modifications needed for project needs.
• Implement and promote standard configuration and change management, processes, and practices.
• Develop test plans, implementation plans, and project timelines for assigned projects.
• Mentor a team of user infrastructure engineers using industry-established best practices.
• Deliver routine status reports on compliance and health of end user endpoints.

Requirements

• Undergraduate degree in engineering or computer science discipline or 5 years or more work experience in an IT endpoint engineering role.
• Experience in information technology, including designing and developing MECM, Intune, and Jamf Pro solutions.
• Experience with scripting languages such as PowerShell, Bash, or Python for automation tasks.
• Familiarity with endpoint security best practices, including antivirus, encryption, and patch management.
• Strong attention to detail and ability to operate effectively across multiple priorities.
• High degree of adaptability that keeps pace with rapid changes in IT technology.

Preferred

• Demonstrated experience with bringing in state-of-the-art endpoint management capabilities into a large, geographically distributed environment.
• Proven experience architecting and engineering deployment workflows using JAMF and Microsoft Autopilot.
• Relevant certifications such as Microsoft Certified: Modern Desktop Administrator Associate, Jamf Certified Tech, or similar.