Software Engineer III
About the role
We are seeking an experienced Senior Windows Engineer to join our team and support a large-scale, enterprise environment of approximately 20,000 Windows endpoints. This role is critical in maintaining, modernizing, and optimizing our Microsoft-based infrastructure, with a strong focus on endpoint management, automation, and end-user experience.
Responsibilities
Design, implement, and manage enterprise endpoint solutions using Microsoft Intune and related Microsoft Endpoint Manager technologies
Administer and support a fleet of ~20,000 Windows devices across a distributed enterprise environment
Lead Windows OS lifecycle management, including deployment, patching, upgrades, and security compliance
Develop, maintain, and optimize advanced PowerShell scripts for automation, reporting, and operational efficiency
Manage and enhance device configuration, compliance policies, and security baselines within the Microsoft ecosystem
Monitor and improve endpoint performance and user experience using tools such as Nexthink
Collaborate with security, networking, and infrastructure teams to ensure alignment with enterprise standards and policies
Troubleshoot and resolve complex, escalated endpoint and OS-related issues
Contribute to strategic initiatives such as Zero Trust, device hardening, and modern workplace transformation
Document processes, standards, and architectural decisions
Requirements
7+ years of experience in Windows engineering within large enterprise environments
Strong expertise in Microsoft Intune (Endpoint Manager) and modern device management (MDM/MAM)
Deep knowledge of Windows 10/11 administration, deployment, and troubleshooting
Advanced PowerShell scripting skills, with a focus on automation and scalability
Experience managing large device fleets (10,000+ endpoints preferred)
Strong understanding of Microsoft 365, Azure AD (Entra ID), Group Policy, and hybrid identity environments
Experience with endpoint monitoring and analytics tools (e.g., Nexthink or similar)
Solid understanding of security best practices, compliance frameworks, and endpoint hardening
Proven ability to operate independently and handle high-impact escalations
Qualifications
Experience with Autopilot, Windows Update for Business, and application packaging/deployment
Familiarity with co-management (ConfigMgr/SCCM and Intune) environments
Knowledge of virtualization technologies (e.g., AVD, VDI)
Skills
Strong problem-solving and analytical skills
Ability to simplify complex technical challenges and communicate effectively to stakeholders
Proactive mindset with a focus on automation and continuous improvement
Leadership qualities and ability to mentor junior engineers
Benefits
At Pearson, we offer a comprehensive benefits package that includes:
Health insurance
Retirement savings plans
Flexible work arrangements
Professional development opportunities
Pay
The salary range for this role is $120,000 - $150,000 annually, depending on experience and qualifications.
Schedule
This role is currently hybrid, with a mix of remote and in-office work. Remote work is encouraged but not required.