IT Endpoint Engineer

Role overview

Own the systems and standards that keep company devices deployed, secure, compliant, and reliable. This hands-on endpoint engineering role combines automation and policy design with hardware troubleshooting, office technology work, and escalation support for IT colleagues.

Responsibilities

- Administer device management for Windows and macOS, including enrollment, configuration, compliance policies, and application delivery. - Build zero-touch provisioning workflows and audit enrollment to maintain broad device coverage. - Define secure personal-device enrollment and access workflows, and manage device procurement, refresh, repair, and retirement. - Establish endpoint security baselines, patch schedules, and health policies; coordinate device compliance signals with identity and access controls. - Monitor endpoint telemetry and alerts, coordinate remediation, and translate security framework requirements into technical controls and documentation. - Resolve complex device and office technology issues, mentor support specialists, and maintain runbooks and knowledge base material.

Requirements

- Experience administering endpoint management, including mobile device management, compliance, and software deployment. - Experience operating zero-touch device deployment at scale, such as Autopilot, Apple automated enrollment, or an equivalent approach. - Ability to write clear documentation and turn written policy into enforceable technical settings. - Comfortable moving between system design and practical hardware work. - Available for occasional evening or weekend deployments and maintenance, travel to vendor sites or other locations, and occasional extended hours for critical needs.

Nice to have

- Familiarity with modern device management tools such as Intune, Jamf, JumpCloud, or Kandji. - Scripting skills in PowerShell, Bash, or Python; knowledge of zero-trust access and device posture. - Experience with a security or compliance framework such as NIST, ISO 27001, or SOC 2, and with endpoint alert triage and remediation.

Benefits and work setup

- The position is ideally based on-site in Portland, Oregon. Exceptional remote candidates may be considered if they can work on-site there at least one week per quarter. - Listed compensation is $120,000–$180,000 in cash plus equity. Benefits include flexible paid time off, health, dental, vision, and disability coverage, tax-advantaged savings accounts, and possible relocation assistance.