Endpoint Management Engineer

Gillette Children's is looking for an Endpoint Management Engineer to take strategic and operational ownership of our endpoint management and end-user computing environment. You will design, administer, and continuously improve the platforms that keep our clinicians and staff productive and our devices secure, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. You will also evaluate and adopt new technologies that improve the end-user experience.

This is an onsite based position located in St. Paul, MN. The schedule for the position is Monday-Friday, 8:00am-4:30pm (with some flexibility). On-call expectations once onboarded. The selected candidate can expect to be on-call every 8-10 weeks.

Compensation & Benefits

The annual salary range for this opportunity is $92,497 to $138,736, with a median salary of $115,606/annually. Pay is dependent on several factors including relevant work experience and internal equity. Salary is just one component of the compensation package for employees. Gillette supports career progression and offers a competitive benefits package, including a retirement saving match, tuition and certification reimbursement, paid time off, and health and wellness benefits for .5 FTE and above.

Primary Job Responsibilities

You'll work closely with Security, Infrastructure, Networking, Clinical Applications, service desk, desktop support, and you'll be the senior technical escalation point for enterprise-wide endpoint issues.

• Strategy and planning: Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned to clinical and business workflows. Take part in budgeting and lifecycle planning for endpoint hardware and software.
• Patching and security: Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods. Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
• Deployment and packaging: Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android. Set packaging standards, manage the software catalog and licensing compliance, and run changes through change management with testing and rollback planning.
• Escalation and root cause analysis: Own enterprise-wide endpoint incidents from start to finish. Use event logs, endpoint telemetry, Intune reporting, and OS diagnostics to find root causes, coordinate resolution across IT teams, and put long-term fixes in place.
• Automation and reporting: Replace manual processes with scripting, automation, and self-service. Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
• Documentation and audit: Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.

Qualifications

Required

• Bachelor's degree in computer science, MIS, Business Administration, Information Technology or a minimum of 4 years of equivalent experience.
• Experience with enterprise-wide information systems.
• Proficiency in system implementation, support, and maintenance within an IT environment.
• Experience with documentation and version control of system configurations, user guides, and standard operating procedures.
• Deep experience with scripting and automation.

Knowledge, Skills and Abilities

• Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement processes.
• Advanced knowledge of endpoint management platforms and technologies, including Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
• Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
• Strong experience with endpoint configuration management, operating system imaging, application deployment, and software packaging.
• Demonstrated ability to automate endpoint administration and operational processes using scripting and other automation technologies.
• Experience managing enterprise endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
• Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
• Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
• Strong understanding of change management, testing, validation, and release management practices.
• Proven ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
• Experience serving as a technical escalation resource and collaborating effectively with support, infrastructure, security, and application teams.
• Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
• Strong understanding of business processes and the ability to align endpoint solutions with operational needs.
• Knowledge of healthcare technology environments and applicable regulations, including HIPAA, and other healthcare compliance standards.
• Excellent analytical, organizational, problem-solving, and decision-making skills.
• Excellent verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
• Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.

Preferred

• MBA, or related master's degree.
• Previous experience working in a hospital setting.