Core Responsibilities:- Lead endpoint automation for provisioning, compliance, remediation, and standard configuration across the Windows fleet.
- Engineer and modernize deployment workflows using Microsoft Intune, SCCM/MECM, and Windows Autopilot, with a focus on repeatability, safety, and scale.
- Build reusable PowerShell-based frameworks (and supporting tooling) for device configuration, drift detection, self-healing remediation, and operational consistency.
- Define and evolve Windows endpoint standards including OS baseline configuration, security baselines, and lifecycle practices aligned with enterprise requirements.
- Partner with QA and release governance to improve validation practices for patches, feature updates, policy changes, security configuration, and application rollouts.
- Implement and expand CI/CD practices for endpoint engineering content (scripts, configuration, packaging, policy-as-code where applicable), using Git-based workflows, reviews, and promotion patterns.
- Integrate with identity and security platforms (e.g., Microsoft Entra ID) to support secure provisioning, access, and device compliance patterns.
- Reduce operational toil and improve reliability by automating routine work, codifying repeatable runbooks, and improving observability and troubleshooting signals.
- Collaborate across Workplace Engineering (Windows, VDI, macOS/mobility, Digital Workplace) to standardize engineering patterns and share automation approaches.
Technical Requirements:- Strong experience with Windows endpoint engineering in an enterprise environment (OS configuration, policy management, troubleshooting, and lifecycle management).
- Hands-on experience with Microsoft Intune and SCCM/MECM for application delivery, device management, and endpoint configuration.
- Experience with Windows Autopilot and modern provisioning patterns.
- Proficiency in PowerShell for automation, packaging, and remediation workflows.
- Working knowledge of CI/CD concepts and Git-based workflows (code reviews, branching strategies, reusable templates/modules).
- Familiarity with Microsoft Entra ID and endpoint identity/compliance patterns.
- Experience with Desired State concepts (e.g., Desired State Configuration or similar) is a plus.
- Understanding of enterprise endpoint security concepts (security baselines, hardening, least privilege, patching/updates).
- Familiarity with monitoring/telemetry and operational observability concepts is a plus.
What it takes:- Undergraduate degree in a related field or equivalent experience.
- 3-5+ years of relevant experience in Windows endpoint engineering, automation, or platform engineering roles.
- Strong analytical, problem-solving, and troubleshooting skills.
- Strong written and verbal communication skills, with the ability to document standards and enable others.
- Ability to work across teams, influence standards, and drive automation-first engineering practices.
- Strong planning, organization, and delivery discipline.
Qualifications:- Minimum of eight years related work experience.
- Undergraduate degree in a related field or the equivalent combination of training and experience.
Special FactorsSponsorshipVanguard is not offering visa sponsorship for this position.
