Senior Endpoint Engineer

About the role

You will drive the delivery of roadmap initiatives, provide expert-level technical support for the End User Computing environment, and collaborate with cross-functional teams to design and implement endpoint solutions.

Responsibilities

• Drive delivery of roadmap initiatives on schedule and in accordance with established quality standards.
• Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence, and performance.
• Provide last-tier support for operations and support teams, including root cause analysis and preventative analysis.
• Act as an escalation point for the Desktop Operations team for anything related to the End User Computing environment, focusing on Endpoint Security Protection and application management.
• Collaborate with cross-functional engineering teams to design and implement endpoint solutions.
• Manage the Azure Virtual Desktop (AVD) environment, including creating images, deploying virtual machines, and monitoring platform performance.
• Develop automated solutions for deploying software packages, application patches/updates, and workstation images.
• Engineer, maintain, and support multiple Windows desktop images.
• Manage the entire lifecycle of global standard desktop and laptop models.
• Design and implement Microsoft Intune solutions that meet end-user requirements.
• Create and manage Intune policies for application deployment, device compliance, and security configurations.
• Ensure seamless integration with other Microsoft 365 services.
• Design and deploy Windows 11 provisioning processes using Intune Autopilot; configure and manage Windows Update for Business policies.
• Develop and maintain standardized Windows 11 deployment images.
• Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies.
• Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.
• Implement security best practices and compliance policies within Intune; monitor and respond to security incidents related to mobile devices and endpoints.
• Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.
• Maintain desktop images and modify SCCM task sequences as needed.
• Package, test, validate, and deploy enterprise applications.
• Maintain and expand the End User Computing knowledge base.
• Create and maintain support documents to uphold high standards of quality in End User Computing services.

Qualifications

• 8+ years of IT infrastructure and endpoint engineering experience, including 5+ years designing and implementing Microsoft Intune solutions.
• 5+ years of systems engineering experience in a complex enterprise environment.
• Enterprise desktop engineering and endpoint support experience.
• Proven experience with Windows 11, Active Directory, and Group Policy management.
• Experience developing and testing software packages using InstallShield or equivalent packaging technologies.
• Experience managing VDI environments, preferably Azure Virtual Desktop (AVD).
• Expert-level experience in endpoint protection engineering and security controls.
• Advanced expertise with Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune.
• Expert knowledge of patch management, including BIOS, firmware, operating system, and application updates.
• Basic database administration knowledge, particularly Microsoft SQL Server.

Skills

• Excellent written and verbal communication skills.
• Strong analytical, organizational, and problem-solving abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Strong collaboration and stakeholder engagement skills.
• Demonstrated commitment to continuous learning and professional development.
• Ability to work independently while contributing effectively within a team environment.