Lead Engineer - Endpoint

Work Perks

• Flight benefits for you and your family to fly on Frontier Airlines
• Buddy passes for your friends so they can experience what makes us so great
• Discounts throughout the travel industry on hotels, car rentals, cruises and vacation packages
• Discounts on cell phone plans, movie tickets, restaurants, luggage and over 2,000 other vendors
• ‘Dress for your Day’ business casual environment
• Flexible work schedules that support work/life balance
• Total Rewards program including a competitive base salary, short term incentives, long-term incentives, paid holidays, 401(k) plan, vacation/sick time and medical/dental/vision insurance

Who We Are

Frontier Airlines is a leading ultra-low cost carrier headquartered in Denver, Colorado. With a mission to deliver Low Fares Done Right, the company provides affordable, convenient and accessible air travel throughout the U.S., Caribbean, Mexico and Latin America. Frontier’s highly fuel-efficient, all-Airbus fleet is among the youngest and most modern of any carrier within the U.S. That, combined with the airline’s many weight-saving initiatives and focus on operational efficiencies, makes Frontier America’s Greenest Airline.

The HOPE League, Frontier Airlines’ non-profit organization, is dedicated to providing employees financial assistance during catastrophic hardship.

What Will You Be Doing?

The Lead Endpoint, Identity & Microsoft 365 Administrator is responsible for the architecture, engineering, security, administration, and continuous improvement of the enterprise endpoint, identity, and Microsoft 365 ecosystems. This role provides technical leadership for endpoint management, identity services, collaboration platforms, and cybersecurity initiatives that support a secure, resilient, and compliant hybrid (Cloud & On-prem) technology environment.

Essential Functions

• Identity Administration: Manage and support Active Directory and Microsoft Entra ID objects, including users, groups, service accounts, organizational units, attributes, and identity lifecycle processes.
• Secure Access: Administer and support Conditional Access, Multi-Factor Authentication (MFA), and related identity security controls aligned to zero trust and company security standards.
• Endpoint Management: Configure, deploy, and maintain endpoint management capabilities using Microsoft Intune and related MDM/MAM platforms.
• Device Enrollment and Compliance: Manage endpoint enrollment, provisioning, compliance policies, configuration profiles, and device lifecycle processes for Windows, mobile, and other supported platforms.
• Endpoint Security: Experience configuring and supporting Defender for Endpoint.
• Endpoint Patching: Manage device patching, software updates, and remediation activities using ManageEngine Endpoint Central and Microsoft endpoint management tools.
• Application Deployment: Package, deploy, update, and troubleshoot applications across managed endpoints using Intune, ManageEngine Endpoint Central, and other approved tools.
• Zscaler Administration: Support Zscaler ZIA/ZPA access policies, client connector deployment, secure internet access, and private application access troubleshooting.
• Microsoft 365 Administration: Administer Microsoft 365 services, including licensing, collaboration services, service health monitoring, and user support.
• Exchange Online Administration: Support mailbox administration, mail flow, distribution groups, shared mailboxes, permissions, and troubleshooting of Exchange Online issues.
• Troubleshooting and Support: Provide advanced technical support for identity, endpoint, secure access, mail, and Microsoft 365 service issues while minimizing business disruption.
• Security Management: Implement and maintain endpoint and identity security controls to protect users, devices, applications, and data from threats and vulnerabilities.
• Automation and Scripting: Use PowerShell and other approved automation methods to improve administration, reporting, remediation, and operational efficiency.
• Documentation: Maintain comprehensive documentation of identity, endpoint, access, Microsoft 365, Exchange Online, and operational procedures.
• Collaboration: Work closely with infrastructure, cybersecurity, networking, service desk, and business teams to align platform administration with organizational goals.
• Training and Knowledge Sharing: Provide guidance and support to IT teams and end users on endpoint, identity, secure access, and Microsoft 365 best practices.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Technology, or related field or equivalent combination of education and experience required.
• Technical Experience: At least 7 years of experience in enterprise endpoint management, identity administration, Microsoft 365 administration, or related infrastructure operations.
• Hybrid Identity Experience: Hands-on experience supporting hybrid identity environments using Active Directory and Microsoft Entra ID.
• Endpoint Management Experience: Experience configuring and supporting Microsoft Intune, endpoint compliance, device enrollment, application deployment, and patch management.
• Endpoint Tooling: Experience with ManageEngine Endpoint Central or similar endpoint patching and device management platforms strongly preferred.
• Secure Access Platforms: Experience supporting Zscaler ZIA/ZPA, client connectors, secure internet access, and private application access preferred.
• Microsoft 365 and Exchange Online: Experience administering Microsoft 365 services and Exchange Online, including mailbox management, mail flow, permissions, and collaboration services.
• Automation: PowerShell scripting experience for administration, reporting, troubleshooting, and process automation strongly preferred.
• Certifications: Relevant certifications such as Microsoft Certified: Endpoint Administrator Associate, Microsoft 365 Certified Administrator, Microsoft Certified: Identity and Access Administrator Associate, JAMF Certified Admin, or similar are a plus.
• Problem-Solving: Excellent troubleshooting and problem-solving skills.
• Communication: Strong verbal and written communication skills.
• Team Player: Ability to work effectively in a team-oriented environment and collaborate with infrastructure, cybersecurity, networking, and service desk teams.
• Knowledge, Skills And Abilities: Strong understanding of Active Directory and Microsoft Entra ID administration, including users, groups, service accounts, synchronization concepts, and hybrid identity operations; Knowledge of Conditional Access and MFA; Advanced skills in configuring and managing Microsoft Intune, endpoint enrollment, compliance policies, configuration profiles, and application policies; Proficiency with ManageEngine Endpoint Central or similar tools for patch deployment, software updates, endpoint inventory, and remediation; Knowledge of desktop and mobile operating systems such as Windows, iOS, Android, and macOS; Knowledge of Zscaler ZIA/ZPA, client connector behavior, secure internet access, private application access, and policy troubleshooting; Ability to administer Microsoft 365 services, licensing, collaboration features, service health, and user support processes; Knowledge of mailbox administration, mail flow, shared mailboxes, distribution groups, permissions, and Exchange Online troubleshooting; Familiarity with zero trust principles, endpoint security, identity security, and secure configuration standards; Basic knowledge of networking principles and how they relate to endpoint connectivity, cloud services, VPN-less access, and secure web access; Understanding of compliance standards and regulations.