Senior Endpoint Engineer

Role overview

A senior engineering position focused on designing, implementing, and managing enterprise endpoint technologies across Microsoft Windows workstation and server environments that span more than 1,000 devices. The role provides technical leadership for endpoint management platforms, operating system deployment, software packaging, patch management, and endpoint security, partnering closely with Information Security, Infrastructure, Service Desk, and business stakeholders to keep systems secure, stable, and highly available.

Responsibilities

- Administer and maintain Microsoft Intune and enterprise endpoint management platforms supporting Windows workstations and servers. - Administer and support enterprise RMM solutions (such as BigFix, Automox, Ivanti, or NinjaOne) and network monitoring tooling used to track endpoint health. - Design, build, test, document, and deploy enterprise application packages and software updates using PowerShell, batch scripts, Windows Installer (MSI), the Microsoft Office Deployment Tool, Adobe Enterprise Packages, and other unattended installation methods. - Plan and execute operating system deployments, feature upgrades, application rollouts, patching, and broader endpoint lifecycle activities. - Implement endpoint security configurations aligned with standards such as CIS Benchmarks and DISA STIGs, and partner with Information Security on vulnerability remediation, configuration drift, and hardening improvements. - Serve as an escalation point for complex Windows incidents and provide technical mentorship to junior engineers, while following established change management procedures for production changes.

Requirements

- Advanced hands-on experience administering Microsoft Intune and enterprise RMM platforms across large endpoint estates. - Strong PowerShell and scripting capability for automation, packaging, and remediation tasks. - Deep Windows troubleshooting skills covering NTFS and share permissions, Group Policy, registry settings, COM and DCOM components, services, drivers, application dependencies, and OS performance. - Experience managing endpoint environments exceeding 1,000 devices across office, data center, and remote workforce scenarios. - Familiarity with host-based controls such as Windows Defender Firewall and with endpoint compliance, patching, and configuration baselines. - Ability to participate in an on-call rotation and perform periodic evening or weekend work to support planned maintenance, deployments, and emergency troubleshooting.

Nice to have

- Microsoft, Azure, Windows Server, security, or IT service management certifications are welcomed but not required, for example Microsoft Certified: Endpoint Administrator Associate, Microsoft Certified: Windows Server Hybrid Administrator Associate, Microsoft Certified: Azure Administrator Associate, CompTIA Security+, or ITIL Foundation.

Benefits and work setup

- Paid Time Off (PTO), paid holidays, and company-paid life insurance. - Medical, Dental, and Vision coverage, plus an Employee Assistance Program. - Flexible Spending Account, Health Savings Account, and a matching 401(k) plan. - Typical office or remote work environment with moderate noise levels; minimal travel may be required. The role involves sitting at a computer for extended periods, with occasional standing, walking, or lifting of equipment weighing up to 25 pounds.