Oaktree Capital Group, LLC

Endpoint Engineer, Technology & Security

Oaktree Capital Group, LLC • $125K — $160K *
Los Angeles, CA 90011In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5+ years of relevant experience
  • Strong troubleshooting skills across Windows OS and endpoint security controls
  • Effective communication skills for technical and non-technical audiences
  • Microsoft certifications preferred (e.g., Endpoint Administrator Associate)
  • Experience in migrating to Microsoft Intune and modern endpoint management
  • Familiarity with AI-assisted tools for automation
  • Knowledge of application packaging and deployment processes

Responsibilities

  • Own and improve the endpoint management platform
  • Manage the complete lifecycle of Windows endpoints
  • Lead the transition to cloud-native endpoint management
  • Leverage AI for improved endpoint operations
  • Design and optimize Intune configuration profiles and security policies
  • Support diverse device management scenarios including hybrid models
  • Act as escalation point for complex endpoint issue resolution

Benefits

  • Discretionary bonus incentives
  • Comprehensive benefits package
  • Flexible work arrangement
Full Job Description
Responsibilities

Oaktree is seeking a highly motivated and technical Endpoint Engineer to support the Information Security team at Oaktree.

Endpoint Management & Engineering

  • Own and continuously improve the modern endpoint management platform, including Microsoft Intune, Windows Autopilot, Microsoft Entra ID, and related technologies.


  • Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, OS upgrades, troubleshooting, and retirement.


  • Lead the transition from SCCM/MECM and Group Policy-based management to modern, cloud-native endpoint management, including decommissioning legacy infrastructure.


  • Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and operational consistency.


Microsoft Intune & Modern Management

  • Design, implement, and optimize Intune configuration profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.


  • Support Microsoft Entra joined, hybrid-joined, co-managed, and cloud-native device management scenarios.


  • Develop standardized processes for device provisioning, refresh, rebuilds, feature updates, and hardware lifecycle management.


Endpoint Security & Compliance

  • Implement and maintain endpoint security controls, including BitLocker, Microsoft Defender, Windows LAPS, Windows Hello for Business, firewall policies, attack surface reduction rules, and security baselines.


  • Configure and monitor compliance policies to ensure devices meet organizational security requirements.


Application & Operating System Management

  • Package, deploy, test, and support applications using Intune, Win32 app deployment, Microsoft Store, PowerShell, and enterprise software distribution tools.


  • Plan and execute Windows feature updates and OS migrations, including readiness assessments, pilot deployments, issue remediation, reporting, and production rollouts.


  • Develop scripts, detection rules, remediation packages, and automation to improve operational efficiency.


Operational Support

  • Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.


  • Diagnose and resolve issues using endpoint logs, Intune reporting, Autopilot diagnostics, PowerShell, Event Viewer, SCCM client logs, and Entra device records.


  • Participate in incident response, change management, root cause analysis, and continuous service improvement.


Documentation & Collaboration

  • Maintain documentation for endpoint architecture, standards, policies, deployment processes, application packaging, and support procedures.


  • Partner with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams to deliver endpoint initiatives.


  • Support audits, compliance efforts, risk assessments, and endpoint modernization projects.


Qualifications

Required Qualifications

  • 5+ years of relevant experience


  • Strong troubleshooting skills across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.


  • Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.


Preferred Qualifications

  • Microsoft certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, Azure Administrator Associate, or related Microsoft security and identity certifications.


  • Experience migrating from SCCM/GPO-based environments to Microsoft Intune and modern endpoint management.


  • Experience with Microsoft Entra Conditional Access, device compliance, Zero Trust, and Microsoft Defender for Endpoint.


  • Experience managing Apple Business Manager, macOS, iOS/iPadOS, and Android devices through Intune.


  • Experience with enterprise application packaging and deployment, including Win32, MSI/MSIX, detection rules, dependencies, and deployment rings.


  • Experience supporting Windows Hello for Business, Cloud Kerberos Trust, Universal Print, VPN, virtual desktop/Citrix environments, and line-of-business applications.


  • Experience using AI-assisted tools (e.g., Microsoft Copilot or Security Copilot) to improve endpoint automation, troubleshooting, reporting, and documentation.


Personal Attributes

  • Strong endpoint engineering mindset with the ability to design for scale, reliability, security, and operational simplicity.


  • Ability to modernize legacy endpoint practices while maintaining business continuity.


  • Strong analytical and troubleshooting skills.


  • Security-first mindset with practical understanding of user experience and operational supportability.


  • Ability to work independently while collaborating across multiple technical teams.


  • Strong documentation discipline and process orientation.


Education

Bachelor's degree required.

Base Salary

$125,000 - $160,000

In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives, a comprehensive benefits package and a flexible work arrangement. The base salary offered will be commensurate with experience and/or qualifications, industry knowledge and expertise, as well as prior training and education.

About Oaktree Capital Group, LLC

Oaktree Capital Group, LLC is a global investment management firm specializing in alternative investment strategies. The firm was founded in 1995 by a group of individuals who had been investing together since the mid-1980s in high yield bonds, convertible securities, distressed debt, real estate, control investments and listed equities. Oaktree has more than 950 employees and offices in 19 cities worldwide. The firm emphasizes an opportunistic, value-oriented and risk-controlled approach to investments in distressed debt, corporate debt (including high yield debt and senior loans), control investing, convertible securities, real estate and listed equities. Oaktree's clients include 75 of the 100 largest U.S. pension plans, more than 400 corporations around the world, and over 350 endowments and foundations globally.
Learn more about Oaktree Capital Group, LLC
Industry
Finance & Insurance
NASDAQ
OAK
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Oaktree Capital Group, LLC

More Information Technology Jobs

Find similar Endpoint Engineer, Technology & Security jobs:

NationwideLos Angeles, CA