Senior Device Management Engineer

About the role

We're looking for a Senior Device Management Engineer to own and evolve our endpoint management ecosystem across a diverse device fleet. You'll be one of the subject matter experts for device lifecycle, security tooling, and automation — keeping our endpoints healthy, secure, and consistently managed at scale.

Responsibilities

• Design, maintain, and optimize endpoint management solutions across Windows and macOS environments using cloud-based and on-premises management platforms
• Manage software deployment, patching, and inventory through enterprise deployment and asset management tooling
• Administer endpoint security and application control policies — including allowlisting, ringfencing, and storage controls — and respond to policy exceptions
• Develop and maintain PowerShell scripts to automate device provisioning, compliance remediation, and reporting workflows
• Own the full device lifecycle: enrollment, configuration baseline, patching cadence, and retirement
• Maintain co-management configurations bridging on-premises and cloud-native management; optimize workload assignments as the environment matures
• Build and enforce compliance policies, conditional access baselines, and security configurations aligned with organizational standards
• Troubleshoot complex endpoint issues across hardware, OS, and management tooling layers
• Document runbooks, configurations, and processes; train and mentor junior IT staff

Requirements

• 5+ years of hands-on experience in endpoint/device management roles
• Deep expertise with cloud-based platforms and on-premises configuration management (co-management experience strongly preferred)
• Experience managing macOS devices with an enterprise Mac management platform
• Hands-on experience with endpoint security and application control solutions
• Proficiency in PowerShell scripting for automation and endpoint management tasks
• Experience with enterprise software deployment and remote management tooling
• Solid understanding of patch management strategy and ring-based deployment
• Familiarity with cloud identity, Conditional Access, and modern device identity concepts
• Strong troubleshooting skills across Windows 10/11 and macOS environments

Nice to have

• Relevant Microsoft or platform-specific certifications
• Understanding of zero-trust network access concepts as they relate to endpoints
• Experience in vulnerability management and endpoint detection platforms
• Exposure to manufacturing or enterprise environments with mixed device fleets