Windows Endpoint Automation Engineer

Core Responsibilities

• Lead endpoint automation for provisioning, compliance, remediation, and standard configuration across the Windows fleet.
• Engineer and modernize deployment workflows using Microsoft Intune, SCCM/MECM, and Windows Autopilot, with a focus on repeatability, safety, and scale.
• Build reusable PowerShell-based frameworks (and supporting tooling) for device configuration, drift detection, self-healing remediation, and operational consistency.
• Define and evolve Windows endpoint standards including OS baseline configuration, security baselines, and lifecycle practices aligned with enterprise requirements.
• Partner with QA and release governance to improve validation practices for patches, feature updates, policy changes, security configuration, and application rollouts.
• Implement and expand CI/CD practices for endpoint engineering content (scripts, configuration, packaging, policy-as-code where applicable), using Git-based workflows, reviews, and promotion patterns.
• Integrate with identity and security platforms (e.g., Microsoft Entra ID) to support secure provisioning, access, and device compliance patterns.
• Reduce operational toil and improve reliability by automating routine work, codifying repeatable runbooks, and improving observability and troubleshooting signals.
• Collaborate across Workplace Engineering (Windows, VDI, macOS/mobility, Digital Workplace) to standardize engineering patterns and share automation approaches.

Technical Requirements

• Strong experience with Windows endpoint engineering in an enterprise environment (OS configuration, policy management, troubleshooting, and lifecycle management).
• Hands-on experience with Microsoft Intune and SCCM/MECM for application delivery, device management, and endpoint configuration.
• Experience with Windows Autopilot and modern provisioning patterns.
• Proficiency in PowerShell for automation, packaging, and remediation workflows.
• Working knowledge of CI/CD concepts and Git-based workflows (code reviews, branching strategies, reusable templates/modules).
• Familiarity with Microsoft Entra ID and endpoint identity/compliance patterns.
• Experience with Desired State concepts (e.g., Desired State Configuration or similar) is a plus.
• Understanding of enterprise endpoint security concepts (security baselines, hardening, least privilege, patching/updates).
• Familiarity with monitoring/telemetry and operational observability concepts is a plus.

Qualifications

• Minimum of eight years related work experience.
• Undergraduate degree in a related field or the equivalent combination of training and experience.