Senior Endpoint Engineer

• Provide hands-on technical leadership, architecture, design review, and guidance for endpoint platforms
• Establish platform priorities, technical standards, escalation coverage, and an enterprise endpoint roadmap
• Serve as technical authority and senior escalation point for enterprise endpoint management
• Own endpoint engineering documentation, change control, testing, rollback standards, support handoffs, knowledge transfer, and cross-training
• Define and maintain Windows endpoint configuration, security, compliance, access, and policy standards
• Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre-provisioning, reset, and redeployment workflows
• Design Microsoft Entra join, hybrid join, MDM enrollment, and legacy-device migration patterns
• Manage Mac, iPhone, and iPad platforms through Microsoft Intune and Apple Business Manager
• Own application packaging and delivery through Intune, including Win32 packages, PSADT, detection rules, dependencies, testing, remediation, and retirement
• Use Patch My PC to publish and maintain third-party and specialized applications
• Develop delivery patterns for large AEC applications including Autodesk AutoCAD and Bentley products
• Manage Windows Autopatch and update-ring strategies and remediate failed installations and exceptions
• Build PowerShell, Microsoft Graph, proactive-remediation, API-based, and governed AI-assisted automation
• Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
• Develop dashboards and reports for enrollment, compliance, encryption, patch posture, deployment success, device health, and remediation performance
• Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
• Set endpoint hardware lifecycle, refresh, recovery, reuse, retirement, and secure-disposition standards
• Own Microsoft Teams Rooms architecture, management, monitoring, updates, licensing dependencies, and escalation paths
• Govern the enterprise copier and plotter fleet, including standards, vendors, configuration, lifecycle, inventory, and service metrics
• Lead endpoint discovery, assessment, planning, and migration for newly acquired firms
• Partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations
• Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

Requirements

• 7 or more years of endpoint management, systems engineering, or modern workplace experience
• Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
• Demonstrated technical leadership and ability to influence technical peers without formal reporting authority
• Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture
• Experience with enterprise software packaging and delivery, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
• Advanced PowerShell skills and practical experience using Microsoft Graph or other APIs
• Strong understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
• Experience supporting distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
• Experience reconciling data across device-management, identity, asset, remote-support, and service-management systems
• Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
• Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred
• Experience governing an enterprise copier, printer, or plotter fleet is preferred
• Experience with endpoint equipment warehousing and depot operations is preferred
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, is preferred
• No educational credential is specified

Core Competencies

Demonstrates extensive expertise in endpoint management, including Microsoft Intune, Windows Autopilot, and endpoint policy architecture. Capable of providing technical leadership and managing complex endpoint environments while ensuring compliance and security standards are met.

Highest-signal resume keywords

• Microsoft Intune Management
• Windows Autopilot Deployment
• Endpoint Policy Architecture
• Advanced PowerShell Skills
• Microsoft Entra ID Device Management

Hard Skills

• Endpoint Management
• Systems Engineering
• Enterprise Software Packaging
• Windows 11 Configuration
• Application Delivery
• Vulnerability Remediation
• Data Reconciliation
• Hardware Lifecycle Management
• AEC Application Packaging
• Endpoint Operations Support

Soft Skills

• Technical Leadership
• Influencing Technical Peers
• Communication with Stakeholders

Industry Keywords

• Endpoint Security
• Compliance Standards
• Distributed Enterprise Environment
• Asset Governance
• Mergers and Acquisitions

Tools & Technologies

• Microsoft Graph
• Microsoft Defender for Endpoint
• BitLocker
• Windows LAPS
• Apple Business Manager
• Patch My PC
• Microsoft Teams Rooms