Job Summary
Client is seeking an experienced Endpoint Engineer III to architect, implement, and optimize modern endpoint management solutions across its global enterprise environment. This role is responsible for managing the lifecycle of Windows endpoints, including deployment, application management, patching, security, compliance, and troubleshooting.
The ideal candidate will possess deep technical expertise in Microsoft Intune, MECM/SCCM, Windows Autopilot, PowerShell scripting, and enterprise endpoint management. The role will serve as a Tier 3 escalation point, drive endpoint modernization initiatives, support the enterprise-wide rollout of Windows 11, and collaborate with cross-functional teams to enhance security, operational efficiency, and user experience.
Key Responsibilities
Modern Endpoint Management
Architect, implement, and optimize Microsoft Intune and MECM solutions to manage Client global fleet of Windows endpoints.
Translate existing Group Policy Objects (GPOs) into scalable, cloud-native Intune configuration and compliance policies.
Windows Deployment & Lifecycle Management
Oversee the deployment and maintenance of Windows 10/11 images using Windows Autopilot, ensuring zero-touch provisioning for global users.
Define endpoint hardware and software lifecycle standards in collaboration with Global IT leadership.
Application & Patch Management
Automate the deployment of applications, patches, and drivers across endpoints to ensure enterprise-wide consistency.
Design, implement, and support third-party patching solutions, including PatchMyPC.
Administer software distribution, desktop security, firmware updates, and remote support tools to improve endpoint efficiency.
Define servicing plans to keep client devices current while balancing stability, security, and business requirements.
Security & Compliance
Implement security baselines and Microsoft Defender for Endpoint policies to protect devices against security threats.
Ensure compliance with Client global security frameworks, IT controls, and regulatory requirements.
Automation & Scripting
Develop and maintain PowerShell scripts to automate endpoint management, reporting, and system administration.
Leverage scripting for remediation tasks, user provisioning, and compliance enforcement.
Escalation & Troubleshooting
Serve as a Tier 3 escalation point for complex operating system (OS), application, and endpoint hardware issues.
Partner with IT Service Desk, Deskside Support, and regional IT teams to resolve issues efficiently and improve root-cause analysis.
Cross-Functional Collaboration
Collaborate with Security, Networking, and Cloud teams to align endpoint strategy with Cleint enterprise architecture.
Participate in architectural discussions, cross-functional infrastructure projects, and digital workplace initiatives.
User Experience & Documentation
Improve user productivity by ensuring seamless onboarding, provisioning, and device management.
Create and maintain technical documentation, standard operating procedures (SOPs), and training materials for the Endpoint team.
Continuous Improvement
Drive a continuous service improvement culture through research and development (R&D), validation, and pilot programs to modernize endpoint services.
Support the enterprise-wide rollout of Windows 11 and future endpoint innovation initiatives, including Digital Experience Monitoring (DEX) solutions.
Required Qualifications
Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field. Equivalent work experience will be considered.
Minimum of 4+ years of experience managing Microsoft Intune and MECM/SCCM in large-scale enterprise environments.
Minimum of 4+ years of experience in endpoint lifecycle management, patching, compliance, and application delivery.
Deep knowledge of Windows 10/11, Microsoft Intune, MECM/SCCM, Windows Autopilot, Azure AD/Entra ID, and the Microsoft 365 ecosystem.
Extensive experience with application packaging, software distribution, OS patching, third-party application patching, imaging, and modern endpoint management.
Advanced PowerShell scripting experience, preferably using PowerShell App Deployment Toolkit (PSADT).
Demonstrated experience architecting and deploying solutions for large enterprise endpoint environments with 20,000+ endpoints.
Strong understanding of enterprise security baselines, endpoint hardening, and compliance frameworks.
Experience with hybrid identity management, including Azure AD/Entra ID, Group Policy, and Conditional Access.
Solid knowledge of global IT infrastructure environments, including networks, enterprise security suites, device lifecycle management, and SaaS/O365 applications.
Excellent communication and cross-functional collaboration skills.
Strong organizational skills with the ability to prioritize and manage multiple projects simultaneously.
Ability to provide mentorship to junior engineers and collaborate with leadership on strategic initiatives.
Preferred Qualifications
Knowledge of AppleScript or Bash scripting for Mac device integration.
Familiarity with Jamf Pro for macOS/iOS management.
Experience supporting enterprise-wide Windows 11 migration and Digital Experience Monitoring (DEX) initiatives.
Experience driving endpoint modernization, pilot programs, and continuous service improvement initiatives.
Certifications
Microsoft Certified: Intune Expert, Endpoint Administrator Associate, or an equivalent certification preferred.
Jamf 300/400 Certification is a plus but not required.
TIL Foundation Certification or knowledge of IT Service Management (ITSM) practices preferred.
