Senior Endpoint Engineer

• Provide hands-on technical leadership, architecture, design review, and practical guidance for endpoint platforms
• Establish platform priorities, service ownership, technical standards, escalation coverage, and an executable roadmap
• Serve as technical authority and senior escalation point for enterprise endpoint management
• Own endpoint engineering documentation, change control, testing, rollback standards, support handoffs, knowledge transfer, and cross-training
• Define and maintain Windows endpoint configuration profiles, security baselines, compliance policies, assignment groups, role-based access, and policy exceptions
• Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre-provisioning, reset, redeployment, and zero-touch workflows
• Design Microsoft Entra join, hybrid Entra join, automatic MDM enrollment, and legacy-device transition patterns
• Manage Mac, iPhone, and iPad platforms through Microsoft Intune and Apple Business Manager
• Own application packaging and delivery in Intune, including Win32 packages, PSADT, detection rules, dependencies, supersedence, testing, assignments, remediation, and retirement
• Use Patch My PC to publish and maintain third-party and specialized applications
• Develop delivery patterns for large and specialized AEC applications, including Autodesk AutoCAD and Bentley products
• Manage Windows Autopatch and update-ring strategies; monitor results and remediate failures and exceptions
• Build PowerShell, Microsoft Graph, API-based, proactive-remediation, and governed AI-assisted automation
• Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
• Develop dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation
• Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
• Set endpoint hardware lifecycle, warranty, leasing, refresh, recovery, reuse, retirement, and secure-disposition standards
• Own Microsoft Teams Rooms architecture, standards, lifecycle, monitoring, documentation, vendor coordination, and escalation paths
• Govern Trilon's copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, usage, and service metrics
• Lead endpoint discovery, assessment, planning, and migration for newly acquired firms
• Define phased integration plans and partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations
• Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

Requirements

• 7 or more years of endpoint management, systems engineering, or modern workplace experience
• Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
• Demonstrated technical leadership and ability to influence technical peers without formal reporting authority
• Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture
• Enterprise software packaging and delivery experience, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
• Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation
• Advanced PowerShell skills and practical experience with Microsoft Graph or other APIs
• Understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
• Experience supporting distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
• Experience reconciling data across device-management, identity, asset, remote-support, and service-management systems
• Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
• Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred
• Experience governing an enterprise copier, printer, or plotter fleet is preferred
• Experience with endpoint equipment warehousing and depot operations is preferred
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, is preferred
• PSADT, Patch My PC, Microsoft Teams Rooms, copier/plotter fleet, depot operations, and AEC application experience are preferred where stated
• Individual-contributor technical-lead role; not a formal people-manager position

Core Competencies

Demonstrates extensive expertise in endpoint management, particularly with Microsoft Intune and Windows Autopilot, while providing technical leadership and architecture for enterprise environments. Proficient in managing complex application packaging, deployment, and compliance across diverse platforms, ensuring robust security and operational efficiency.

Highest-signal resume keywords

• Microsoft Intune
• Windows Autopilot
• Endpoint Management
• PowerShell
• Microsoft Entra ID

ATS Optimization Keywords

Hard Skills

• Endpoint Policy Architecture
• Enterprise Software Packaging
• Windows Autopatch
• Application Delivery
• Compliance Policies
• Security Baselines
• Change Control
• Automation
• Data Reconciliation
• Device Management

Soft Skills

• Technical Leadership
• Communication
• Influencing Peers

Industry Keywords

• Endpoint Security
• Vulnerability Remediation
• Hardware Lifecycle Management
• AEC Applications
• Distributed Environments

Tools & Technologies

• Microsoft Graph
• Patch My PC
• Apple Business Manager
• Microsoft Teams Rooms
• Defender for Endpoint