Lead Infrastructure Engineer - Endpoint

Salary Range

$101,490 - $120,000. This position is eligible for annual incentive pay and has the opportunity for continued salary growth. The base salary range represents a good faith salary range for this position. If hired, base salary compensation will be determined based on factors such as market, geography, skills, education and/or experience.

Benefits

• 401(k)
• Defined Contribution Plan
• Employee Stock Purchase Plan
• Medical, prescription, dental and vision coverage
• Disability
• Paid time off
• Life insurance
• Voluntary benefits
• Health and wellness programs
• Learning opportunities and work experiences to grow professionally

Primary Role

Serve as the technical lead for the Endpoint team, owning the strategy, architecture, and day-to-day delivery of enterprise Endpoint and/or VDI services. This role defines and enforces endpoint standards across Windows, macOS, iOS, and Android, ensuring devices are secure, compliant, reliable, and consistently configured throughout their lifecycle (provisioning, enrollment, patching, upgrades, break/fix, and retirement).

The Lead Infrastructure Engineer partners closely with Service Desk, Field Support, Cyber Security, and key vendors to coordinate service delivery, drive continuous improvement, and provide senior-level escalation for complex incidents and systemic issues.

Core responsibilities include administration and optimization of the enterprise endpoint management ecosystem (device management, identity/access integrations, and endpoint analytics/automation services), including building and maintaining device profiles, compliance policies, security baselines, certificates, and conditional access controls; packaging and deploying applications and updates; and using telemetry and analytics to improve performance and end-user experience.

For VDI, the role leads the engineering and operational support model, including image and application delivery, access workflows, performance and capacity considerations, and alignment with identity, networking, and security requirements.

The position also produces and maintains technical documentation, operational runbooks, and standards, and mentors team members on tooling, troubleshooting, and best practices.

Key Accountabilities

• Develop, document, and enforce endpoint and VDI policies, procedures, and technical standards to ensure secure, compliant, and consistent configurations across Windows, macOS, iOS, and Android
• Maintain operational runbooks and SOPs (including provisioning, enrollment, patching, software deployment, access controls, and incident response), align standards with Security and audit requirements, and drive adherence through reviews, continuous improvement, and change control
• Act as an expert in a particular field of knowledge and provide detailed information and advice as necessary in that specialization to achieve business outcomes
• Develop and/or promote technical solutions which support the business requirements within their area of expertise
• Be accountable for specific deliverables in relation to software or web development and/or support
• As needed, lead the technical activity within their area of specialization

Knowledge/Skills

• Working knowledge of Windows, macOS, iOS and Android environments
• Understanding of how to mass deploy software or Windows images
• Understanding of configurations or installations from SCCM or Workspace ONE
• Perform 3rd level support, identifying root cause with strategic solutions to problems

Experience/Education

• Bachelor's degree in Computer Science, Information Systems, relevant field of Engineering or similar technology field (equivalent work experience will be considered)
• 6 to 9 years experience working in the technology field required
• Experience with the water utility industry is highly desired, but not required
• Experience in Endpoint & System Administration for a highly virtualized, complex enterprise
• Experience in Endpoint & System Engineering for a highly virtualized, complex enterprise
• Experience packaging software
• Familiarization with SCCM or VMware Workspace ONE
• Background in MDM management
• PowerShell, Active Directory and Group Policy/CSP management

Certifications & Licenses

Microsoft MCP/MCSA/MCSE or other related certifications desired

Travel Requirements

As necessary, up to 50%