End-Point Engineer Sr.

Auxis LLC; Puerto Bogotá; On-site; COP 80,000,000 - 140,000,000; Full time

Job summary

Auxis LLC is seeking an experienced Endpoint Engineer to manage enterprise devices with Intune/EndPoint Manager and hybrid Co-management. You will implement security baselines, automate remediation, and resolve Tier 3 incidents across Microsoft 365 workloads.

The role focuses on device lifecycle, policy enforcement, and continuous improvement in a multinational client environment. Strong English communication is required.

Qualifications

• Bachelor's degree or equivalent professional experience.
• 4+ years endpoint engineering in enterprise environments.
• Hands-on experience with SCCM/MECM, including OSD, packaging, and patching.
• Hands-on experience with Microsoft Intune, including configuration profiles and Windows Autopilot.
• PowerShell scripting for endpoint automation.
• Knowledge of Entra ID/Azure AD concepts relevant to endpoint management.
• Strong troubleshooting across Windows client OS, drivers, and applications.
• Fluent English communication.

Responsibilities

• Administer endpoint management via Intune / Endpoint Manager, device lifecycle, enrollment, and hybrid Entra ID join.
• Design, deploy, and maintain compliance policies and security baselines.
• Configure hybrid co-management environments (SCCM with Intune).
• Serve as Tier 3 escalation for endpoint incidents and drive timely resolution.
• Implement Defender for Endpoint and ASR policies and endpoint security hardening.
• Manage Entra ID Conditional Access policies and MFA enforcement.
• Administer Exchange Online, Teams, and SharePoint Online.
• Develop PowerShell scripts and automation (Power Automate) for remediation and reporting.
• Monitor with Azure Monitor, Log Analytics, and KQL to isolate complex issues.
• Maintain client-facing documentation and knowledge base on workflows.

Skills

PowerShell scripting

English communication

Troubleshooting

Education

Bachelor's degree in IT/CS or related field

Tools

SCCM/MECM

Microsoft Intune

Windows Autopilot

Entra ID / Azure AD

Power Automate

Azure Monitor

Job description

Job Summary

This role provides full-time endpoint management and Tier 2–3 technical support across Client’s Microsoft Intune / Endpoint Manager, Microsoft 365, and Azure/Entra ID environment. It focuses on device lifecycle management, security baseline enforcement, and complex incident resolution, while driving automation and continuous improvement across the endpoint environment.

Responsibilities

• Administer and support enterprise endpoint management via Microsoft Intune / Endpoint Manager, including device lifecycle, enrollment, and hybrid Azure AD (Entra ID) join.
• Design, deploy, and maintain compliance policies, security baselines, and application deployment across the managed device fleet.
• Configure and support hybrid co-management environments (SCCM with Intune) for co-managed device populations.
• Serve as Tier 3 escalation point for endpoint incidents, performing business impact analysis and driving timely resolution.
• Implement and maintain Microsoft Defender for Endpoint (EDR), Attack Surface Reduction (ASR) policies, and endpoint security hardening.
• Manage Entra ID Conditional Access policies, MFA enforcement, and sign-in risk configurations.
• Administer core Microsoft 365 workloads relevant to endpoint operations, including Exchange Online, Teams, and SharePoint Online.
• Develop PowerShell and automation scripts (e.g., Power Automate) to streamline device remediation, compliance reporting, and enrollment.
• Monitor and troubleshoot the environment using Azure Monitor, Log Analytics, and KQL queries to isolate and resolve complex issues.
• Maintain client-facing documentation and a knowledge base covering endpoint resolution workflows and standard operating procedures.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 4+ years of hands‑on endpoint engineering experience in enterprise environments.
• Strong hands‑on expertise with SCCM/MECM, including OSD, application packaging, and patch management.
• Hands‑on experience with Microsoft Intune, including configuration profiles, compliance policies, and Windows Autopilot.
• Proficiency in PowerShell scripting for endpoint automation.
• Working knowledge of Entra ID (Azure AD) concepts relevant to endpoint management (hybrid join, conditional access).
• Strong troubleshooting skills across Windows client OS, drivers, and application behavior.
• Strong verbal and written communication skills in English.

Preferred Qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate or equivalent certification.
• Experience executing SCCM-to-Intune co‑management or migration programs.
• Experience supporting macOS or mobile devices (iOS/Android) under MDM.
• Experience in a managed services environment supporting enterprise clients.
• Bilingual English/Spanish.

Technical Skills & Tools

• SCCM/MECM administration (collections, OSD, packaging, patching).
• Microsoft Intune / Windows Autopilot.
• PowerShell scripting.
• Entra ID (Azure AD) fundamentals for endpoint management