Systems Engineer II

About the role

The Collaboration & Endpoint Engineer supports the planning, implementation, administration, and day-to-day operations of enterprise collaboration platforms, endpoint management systems, and virtual desktop infrastructure (VDI) serving over 12,000 endpoints across Windows, macOS, iOS, Android, and other devices. The role serves as a technical contributor and subject matter expert, ensuring seamless communication, security, and productivity across the enterprise.

Responsibilities

• Administer and maintain enterprise collaboration platforms — including Microsoft Teams, Exchange Online, SharePoint, OneDrive, Purview, Zoom, and Box — ensuring availability, performance, security, and compliance.
• Support integration projects with IT and business stakeholders to streamline communication workflows.
• Develop and maintain system documentation, runbooks, and standard operating procedures.
• Administer Active Directory and Microsoft Entra ID, including Group Policy, OU structures, hybrid identity, Conditional Access, RBAC, and directory synchronization via Entra Connect.
• Support identity governance initiatives including access reviews and joiner/mover/leaver lifecycle workflows.
• Troubleshoot identity and authentication issues — SSO, MFA, and federation — across hybrid environments.
• Administer Microsoft Intune for device management across Windows, macOS, iOS, and Android, including enrollment, configuration policies, app deployment, and Windows Autopilot provisioning.
• Support Virtual Desktop Infrastructure (VDI) environments including Azure Virtual Desktop (AVD), Citrix, or VMware Horizon for remote and hybrid workers.
• Maintain endpoint security baselines, CIS benchmarks, and hardening standards in partnership with security teams; enforce Microsoft Defender for Endpoint, BitLocker, and DLP policies.
• Manage endpoint patching and software updates using Intune, MECM/SCCM, or equivalent tooling to ensure timely vulnerability remediation.
• Support application packaging, deployment, and lifecycle for enterprise endpoint software, including scripting using PowerShell or similar tools.
• Monitor endpoint health, compliance posture, and fleet performance using telemetry and reporting.
• Support BYOD and corporate device programs, including conditional access enforcement and data separation policies via Intune App Protection Policies.
• Aid in the administration of enterprise AI tools including Claude (Anthropic), ChatGPT and CoPilot Enterprise, supporting licensing, configuration, user provisioning, and policy management.
• Partner with network, application, governance and security teams to support business requirements and enterprise architecture standards.
• Research emerging technologies across collaboration, AI, identity, and endpoint management and share findings with the team.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or related field — or equivalent work experience.
• 3–5+ years of experience in systems engineering or IT administration in enterprise environments.
• Hands-on experience administering Microsoft 365 platforms, including Teams, Exchange Online, SharePoint Online, Purview, Zoom, and Box.
• Experience with Microsoft Intune / Microsoft Endpoint Manager for MDM/MAM, including device enrollment, compliance policies, configuration profiles, and app deployment across Windows, macOS, iOS, and Android.
• Familiarity with VDI platforms such as Azure Virtual Desktop (AVD), Citrix, or VMware Horizon.
• Scripting and automation experience using PowerShell, Python, or similar tools, including endpoint provisioning and application management.
• Familiarity with endpoint security tooling including Microsoft Defender for Endpoint, BitLocker, and Intune-enforced compliance policies.
• Working knowledge of Active Directory and Microsoft Entra ID, including GPO management, hybrid identity, and Conditional Access.
• Relevant certifications a plus: Microsoft 365 Certified (MD-102), Azure Administrator (AZ-104), or equivalent.
• Strong troubleshooting and problem-solving skills across collaboration and endpoint environments.
• Experience with ServiceNow or similar ITSM platforms.
• Clear written and verbal communication skills, with ability to explain technical concepts to non-technical stakeholders.

Benefits

Life at Lennar offers a comprehensive array of benefits designed to enhance Associates' well-being and professional growth. These include robust health insurance plans, a 401(k) Retirement Plan with a $1 for $1 Company Match up to 5%, Paid Parental Leave, an Associate Assistance Plan, an Education Assistance Program, and up to $30,000 in Adoption Assistance. Additionally, Associates receive up to three weeks of vacation annually, along with generous Holiday, Sick Leave, and Personal Day policies. They also benefit from the New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities like Everyone’s Included Day. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.