Systems Engineer - Endpoint Management

Responsibilities

• Lead administration of Windows endpoint management services using Microsoft Intune, including Autopilot provisioning, application delivery, compliance enforcement, and configuration policy management.
• Manage identity and device access controls through Microsoft Entra ID, with emphasis on Conditional Access integration and device compliance alignment.
• Oversee Windows Update for Business operations by defining deployment rings, coordinating remediation efforts, and guiding staged release strategies for enterprise endpoints.
• Direct driver and firmware governance for Dell and Lenovo systems, including troubleshooting feature update issues, controlling update sequencing, and reducing hardware-related regressions.
• Plan and execute enterprise-scale Windows operating system upgrades, including compatibility validation, pilot testing, phased rollouts, and post-deployment support.
• Develop and maintain advanced PowerShell automation to streamline endpoint administration, improve consistency, and reduce manual operational effort.
• Support developer workstation needs by implementing managed certificate trust approaches for inspected web traffic environments and maintaining reliable endpoint usability.
• Create and maintain Endpoint Privilege Management policies in CyberArk/Idira for Windows devices while aligning configurations with security requirements and operational needs.
• Produce clear operational documentation, standard procedures, and technical decision records so ongoing support can be transferred effectively across teams.
• Participate in formal change control activities by preparing implementation plans, assessing risk, documenting rollback steps, and executing changes in accordance with enterprise governance processes.

Requirements

• At least 7 years of experience managing Windows endpoints in large enterprise environments with the ability to work independently and make sound technical decisions.
• Hands-on expertise with Microsoft Intune in Windows-focused deployments, including Autopilot, compliance policies, application rollout, and configuration profile administration.
• Strong experience with Microsoft Entra ID, Windows Update for Business, and BitLocker management in secure enterprise settings.
• Proven background managing Dell and Lenovo driver and firmware updates, including investigation of feature update driver conflicts and rollout prioritization.
• Advanced PowerShell scripting skills with a track record of building automation for endpoint operations and administration.
• Experience delivering major Windows OS version upgrades at scale using structured testing, deployment waves, and compatibility planning.
• Familiarity with formal IT change management practices, including change documentation, risk evaluation, approval processes, and rollback preparation.
• Strong troubleshooting, analytical, and documentation skills; experience with WSL2, CrowdStrike, CyberArk Endpoint Privilege Management, Windows 365, osQuery, Palo Alto GlobalProtect, or managed certificate trust methods is preferred.

Qualifications

• BS/BA degree in Computer Science, Information Technology, or related field.
• CISSP certification preferred.

Skills

• Microsoft Intune
• Autopilot
• Conditional Access
• Windows Update for Business
• BitLocker
• Dell and Lenovo driver and firmware updates
• PowerShell scripting
• Windows OS version upgrades
• IT change management
• WSL2, CrowdStrike, CyberArk Endpoint Privilege Management, Windows 365, osQuery, Palo Alto GlobalProtect, or managed certificate trust methods

Benefits

Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.