We are hiring a Systems Engineer, Endpoint & Network Operations to help build and operate the endpoint, branch infrastructure, and connectivity foundation for a growing, cloud-based wealth management firm. This role serves as the technical platform owner for endpoint engineering and patch management, supports branch network reliability, and acts as an engineering resolver for issues beyond front-line support. The role will help standardize office technology patterns, improve monitoring and automation, support M&A and new-office cutovers, and partner closely with Cloud & Identity, Service Desk, Cybersecurity, and Integration teams to keep EP Wealth's distributed office environment secure, connected, and reliable.
Duties and ResponsibilitiesEndpoint Engineering- Serve as the technical platform owner for core endpoint platforms, including Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar) - covering day-to-day configuration, platform health, and administration. The employee-facing service experience remains with the Service Desk; this role owns the underlying platform.
- Configure and maintain endpoint deployment profiles and provisioning workflows, including application packaging, deployment, and application push/self-service distribution through Microsoft Company Portal.
- Own the enterprise patch and update strategy across the endpoint fleet, including patch cadence, testing, and rollout.
- Support endpoint security baselines and compliance policies in partnership with the CISO and the cybersecurity team.
- Perform engineering-level troubleshooting and remediation for endpoint platform issues (Intune, Autopilot, and patch management) that require configuration, systemic, or vulnerability-level correction - not routine end-user issues, which remain with the Service Desk.
- Build and maintain endpoint automation (e.g., PowerShell, Intune remediation scripts) to reduce manual effort and recurring issues.
Network & Branch Office Support EngineeringThis role helps build and operate EP Wealth's branch reliability model, including proactive monitoring, technical acceptance standards, recurring issue remediation, vendor escalation, and post-cutover stabilization for new offices, office moves, and acquired partner integrations.
- Configure and support network infrastructure for branch offices, including routing, switching, wireless, and SD-WAN/firewall platforms.
- Support the migration of branch office networking, camera, and digital access systems from Meraki and Netgear to Ubiquiti as part of the Office of the Future initiative, as EP Wealth's new branch networking standard.
- Support adherence to branch network standards and configuration requirements set by engineering leadership.
- Coordinate the technical work of third-party vendors performing physical rack-and-stack activities and assist with remote configuration.
- Support carrier and network vendor technical escalation for connectivity issues.
- Support branch monitoring, telemetry, and the branch uptime/reliability dashboard, and contribute to remediation of recurring connectivity issues.
- Travel to branch offices (~25%, Regional) to support new-office network builds, on-site remediation, and technical validation, including M&A integration cutovers.
- Support the network and connectivity workstream for partnership integrations, including access configuration, cutover support, and post-cutover stabilization.
Systems Administration- Support Microsoft 365, Entra ID, and Azure administration, including Conditional Access, MFA, and PIM configuration, in partnership with the Microsoft Cloud & Identity platform team.
- Maintain detailed documentation of system and network configurations, procedures, and troubleshooting/runbooks.
- Support major incidents and emergency outages in accordance with business continuity and disaster recovery plans.
- Support vendor management for assigned endpoint and network platforms and contracts.
Tier 3 Escalation, Reliability & Change- Serve as the engineering-level escalation point for endpoint, network, and patch management issues that exceed Service Desk / Tier 1-2 capability - handling escalations that require engineering diagnosis, configuration, remediation, or systemic correction, not general front-line overflow.
- Perform root-cause analysis and drive down recurring incidents through remediation and automation.
- Provide technical risk assessment, implementation planning, and rollback planning for changes within scope, in line with EP Wealth's technical change authority model.
- Support the implementation and operation of technical security controls on endpoint and network platforms, in partnership with the CISO and the cybersecurity team.
Qualifications- This role is classified as hybrid and requires the employee to perform work both remotely and from the designated office location within the applicable market identified in this job posting. Candidates must reside within a reasonable commuting distance of the listed office location.
- Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience (preferred).
- 5+ years of experience in systems administration, endpoint engineering, or network engineering in a corporate/enterprise environment, with demonstrated Tier 3-level ownership. Experience in multi-site environments, M&A, or distributed branch operations preferred.
- Endpoint platform experience: hands-on experience administering Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar), including application push/deployment via Microsoft Company Portal.
- Identity & Microsoft 365: working knowledge of Microsoft Entra ID (Conditional Access, device compliance, identity lifecycle) and the Microsoft 365 suite.
- Network engineering: experience with routing, switching, wireless, and firewall/SD-WAN platforms, including supporting multi-site or branch office environments. Ubiquiti experience strongly preferred, as it is EP Wealth's emerging branch office networking standard; Meraki or Netgear experience is also valuable during the transition period.
- Cameras & digital access: experience with IP camera/video surveillance and digital access control (door entry) systems, ideally within the Ubiquiti ecosystem (e.g., UniFi Protect, UniFi Access) or similar.
- Experience serving as an engineering-level escalation resource for endpoint, network, or patch management issues (not general front-line ticket overflow).
- Azure cloud experience (networking, Azure AD/Entra ID).
- PowerShell scripting or similar automation experience.
- Experience executing in an ITIL change-management-focused environment.
Certifications (preferred, not required)- Microsoft Certified: Endpoint Administrator Associate
- Microsoft Certified: Azure Administrator Associate
- URSCA (UniFi Routing, Switching & Cybersecurity Admin) or UWA (UniFi Wireless Admin), or CCNA/Cisco Meraki certification
- ITIL v4 Foundation
Additional Qualifications- Willingness and ability to travel approximately 25% (Regional), with occasional national travel for team working sessions or company events.
- Excellent problem-solving, troubleshooting, and written documentation skills.
- Comfortable operating with significant autonomy as a technical escalation resource across distributed offices.
- Strong communication skills; able to work cross-functionally with the Service Desk, Cloud & Identity, and Security teams.
- Team Player - shares wins and successes; fosters open dialogue; acts as if real success is the success of the whole team.
- Curious - willing to learn and research; learns quickly when facing new problems; enjoys the challenge of unfamiliar tasks.
- AI-Enabled - explores and leverages approved AI tools (e.g., ChatGPT, Claude) to accelerate scripting, documentation, troubleshooting, and knowledge capture.
$110,000 - $125,000 a year
What We OfferWe offer a highly competitive suite of holistic benefits designed to help our team members balance their personal and professional life commitments. These include options designed to encourage employee's health, happiness, and financial well-being.
- 11 Paid Holidays
- 3 Weeks (PTO)
- Paid Volunteer Time
- Paid Parental Leave
- Flexible Work Schedule
- Highly subsidized Health, Dental, and Vision Plans
- 401k Retirement Account with company match contributions
- Free Mental Health services, Life Insurance, Long & Short-Term Disability Insurance
- Flexible Spending Accounts and Health Savings Accounts
- Employee Financial Education
- Employee Educational Expense Reimbursement
- Employee Charitable Donations
- Employee Referral Incentives
- Employee Team Building Activities
- Employee Assistance Program
- Mentorship Program
