ABOUT THE ROLEWelltower is seeking a Digital Workplace Engineer with deep specialization in Microsoft Intune and modern endpoint management. This role supports the design, implementation, governance, and continuous improvement of Welltower's digital workplace ecosystem, with a primary focus on endpoint management, device security, application delivery, and user experience across Microsoft 365. The engineer will partner closely with Security, Identity, Service Desk, Infrastructure, and business teams to deliver secure, scalable, and reliable workplace technology services.
KEY RESPONSIBILITIES Digital Workplace Engineering & Platform Ownership - Engineer and support modern digital workplace capabilities across Microsoft 365 and endpoint services.
- Maintain standards, configurations, documentation, and lifecycle practices for workplace technology platforms.
- Contribute to digital workplace roadmap execution with a focus on secure, reliable, and user-friendly experiences.
Microsoft Intune & Endpoint Specialization - Lead Microsoft Intune design, implementation, governance, and operational management across Windows, iOS, and Android.
- Design and enforce device compliance policies, endpoint security baselines, configuration profiles, and enrollment strategies.
- Implement and optimize Windows Autopilot provisioning, device enrollment, zero-touch deployment, and device lifecycle processes.
Application, Patch & Configuration Management - Package, deploy, and maintain Win32, Microsoft Store, and mobile applications through Intune.
- Support software update rings, feature update policies, driver/firmware strategies, and patch compliance reporting.
- Troubleshoot application deployment failures, policy conflicts, and configuration drift to improve reliability and user adoption.
Endpoint Security, Access & Compliance - Partner with Security and Identity teams to align endpoint posture with Zero Trust principles and Conditional Access requirements.
- Support Microsoft Defender for Endpoint integration, endpoint security policy deployment, attack surface reduction settings, and device risk remediation.
- Manage BYOD strategies including Mobile Application Management, app protection policies, and data protection controls.
Operational Support & Service Excellence - Provide Tier 2/3 escalation support for endpoint, application, compliance, and digital workplace service issues.
- Monitor endpoint health, compliance, deployment status, and service performance trends.
- Identify recurring issues and lead corrective actions, knowledge documentation, and service improvement initiatives.
Automation, Reporting & Continuous Improvement - Develop automation using PowerShell, Microsoft Graph API, and Intune reporting capabilities.
- Create operational reporting for device posture, application deployment, compliance, and remediation progress.
- Continuously improve endpoint performance, service reliability, and the employee technology experience.
Collaboration & Governance - Collaborate with Security, Identity, Service Desk, Infrastructure, Procurement, and business stakeholders.
- Participate in governance processes including change management, standards development, operational readiness, and documentation.
- Provide guidance and enablement to support teams for endpoint and digital workplace processes.
OTHER DUTIES Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of this employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
TRAVEL Minimal travel
MINIMUM REQUIREMENTS - 5+ years of experience in digital workplace, endpoint engineering, systems administration, or Microsoft 365 operations.
- Required specialization in Microsoft Intune / Endpoint Manager, including Autopilot, enrollment, compliance, configuration profiles, and endpoint security baselines.
- Strong experience with Windows endpoint management, application packaging/deployment, update management, and troubleshooting endpoint policy behavior.
- Experience integrating or operating Microsoft Defender for Endpoint and endpoint security controls in a modern workplace environment.
- Working knowledge of Conditional Access, Entra ID concepts, Zero Trust principles, and cloud-first workplace architecture.
- Hands-on scripting or automation experience using PowerShell; Microsoft Graph API experience preferred.
- Ability to translate technical standards into clear documentation, operational procedures, and support guidance.
- Strong troubleshooting, communication, collaboration, and ownership skills.
Preferred Skills:- Microsoft certifications such as MD-102, MS-102, SC-200, SC-300, or equivalent practical experience.
- Experience supporting M365 collaboration workloads such as Teams, SharePoint, OneDrive, Exchange Online, or Purview from an operational support perspective.
- Experience working with Service Desk teams, change management processes, endpoint governance, and enterprise technology standards.
- Experience with macOS management, Apple Business Manager, Android Enterprise, or iOS/iPadOS management is a plus.
WHAT WE OFFER - Competitive Base Salary + Annual Bonus
- Generous Paid Time Off and Holidays
- Employee Stock Purchase Program - purchase shares at a 15% discount
- Employer-matching 401(k) Program + Profit Sharing Program
- Student Debt Program - we'll contribute up to $10,000 towards your student loans!
- Tuition Assistance Program
- Comprehensive and progressive Medical/Dental/Vision options
- Professional Growth
- And much more! https://welltower.com/newsroom/careers/
