Senior Endpoint Engineer

SailPoint Technologies Holdings, Inc.; Pune District; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

SailPoint Technologies Holdings, Inc. seeks a Senior Endpoint Engineer to design, secure, and optimize our global fleet of end-user devices.

You will implement automation for provisioning, software deployment, and lifecycle workflows, while maintaining high security and availability across Windows and macOS endpoints. The role requires strong scripting and endpoint-management expertise, with collaboration across IT security, cloud identity, and Helpdesk teams.

Qualifications

• 5+ years of hands-on engineering experience with Windows and macOS endpoints.
• Experience deploying Microsoft Intune and Jamf Pro for device provisioning.
• Scripting skills: PowerShell, Bash, Python.
• Knowledge of endpoint security, patching, and compliance.
• Bachelor's degree in Computer Science/Engineering or equivalent.

Responsibilities

• Design, maintain, secure, and ensure availability of endpoint management platforms.
• Provide advanced, non-routine technical support for complex end-user device issues.
• Automate provisioning and deployments using scripting and configuration management tools.
• Maintain endpoint security posture, patching, and compliance across the environment.
• Track performance metrics and drive improvements in end-user experience.
• Lead or participate in endpoint infrastructure and optimization projects.

Education

Bachelor's degree in Computer Science/Engineering or equivalent

Tools

Intune

Jamf Pro

Tanium

Job description

Senior Endpoint Engineer

The Senior Endpoint Engineer is responsible for providing advanced engineering, management, and support for our global fleet of end-user devices. This is a senior-level professional position and requires strong execution, technical, and analytical abilities. This position is expected to interact with endpoint management platforms, SaaS products, Security, and various groups within Information Technology to ensure a secure, seamless, and highly optimized end-user experience. Candidates must have strong endpoint configuration, automation, communication, and analytical skills. This position, on very rare occasions, may need to travel to international offices.

Key Responsibilities

• Responsible for the ongoing design, maintenance, security, and availability of endpoint management platforms based on business requirements, adhering to tight operations, security, and procedural models.
• Applies professional-level technical skill and judgment to provide advanced, non-routine technical support and escalation resolution for complex end-user device and operating system issues.
• Installs, configures, upgrades, tunes, and troubleshoots Windows and Mac hardware, software, operating systems, and lifecycle management workflows.
• Maintains access control, device compliance, data integrity, and endpoint security posture (including patching, encryption, and configuration policies) across the end-user environment.
• Monitors, tracks, and records endpoint performance, health, and utilization metrics to proactively improve the overall end-user experience.
• Provide automation solutions for device provisioning (Zero-Touch), software deployments, and manual repetitive tasks using scripting (PowerShell, Bash, Python) and modern configuration management systems.
• Improve efficiency and help standardize current endpoint deployment, application packaging, and lifecycle processes.
• Document and thoroughly understand the endpoint architecture, system configuration across platforms, and integration with various identity and security systems, using this knowledge effectively to resolve issues.
• Determine and document the root cause of widespread endpoint outages or deployment failures, defining duration and recommendations or steps to resolve issues.
• Provide assistance as required in analyzing end-user technology trends and suggesting long-term and short-term improvements to the digital workspace.
• Resolve incidents and problems in accordance with defined guidelines and meet operational level agreements.
• Assist in change management processes, implement change requests, and meet project deliverables within defined guidelines.
• Lead or participate in the development of information technology, endpoint infrastructure, and employee experience projects.
• Respond to general inquiries and serve as a subject matter expert for the Helpdesk/Desktop Support teams.

Requirements

• Requires a dynamic, hard-working individual, with excellent inter-personal, oral, and written communication skills.
• Capable of effectively communicating highly technical information to both technical and non-technical personnel.
• Bachelor's degree in Computer Science/Engineering or equivalent relevant experience.
• 5+ years of hands-on engineering experience managing both Windows and macOS endpoints in an enterprise environment.
• 5+ years of hands-on experience designing, deploying, and managing Microsoft Intune and Jamf Pro for device provisioning, configuration profiles, compliance policies, and application deployment.
• Experience utilizing Tanium is considered a strong plus.
• Proficiency in scripting languages (such as PowerShell for Windows and Bash/zsh/Python for macOS) for administration and automation.
• General understanding of networking principles, cloud identity providers (e.g., Microsoft Entra ID / Azure AD), SSO, and modern endpoint security concepts.
• Strong ability to self-learn new endpoint management technologies and methodologies.
• Individual should be self-motivated with the ability to work independently, but also the capacity to teach and mentor others in the team.
• Sound planning, organizational, and problem-solving skills.
• Demonstrated ability to meet deadlines and commitments in an environment that requires multitasking among concurrent projects.
• Ability to work after hours including weekends and nights when required.
• Ability to lift 25 pounds unassisted.

Roadmap for Success

• 30Days (Learn): Audit Intune/Jamf configurations, Entra ID policies, and shadow IT Helpdesk escalations.
• Deliver a Fleet Health & Compliance Gap Assessment.
• 60Days (Optimize): Streamline zero-touch onboarding (Autopilot/ADE) and build automated patch/app deployment rings.
• Deploy 1+ automated remediation script to cut manual tickets.
• 90Days (Lead): Implement endpoint telemetry/health dashboards and conduct L1/L2 training.
• Present a Quarterly Endpoint Optimization Roadmap.

SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.

SailPoint is a leading provider of identity security for the modern enterprise.

Enterprise security starts and ends with identities and their access, yet the ability to manage and secure identities today has moved well beyond human capacity. Using a foundation of artificial intelligence and machine learning, the SailPoint Identity Security Platform delivers the right level of access to the right identities and resources at the right time—matching the scale, velocity, and environmental needs of today’s cloud-oriented enterprise.

Our intelligent, autonomous, and integrated solutions put identity security at the core of digital business operations, enabling even the most complex organizations across the globe to build a security foundation capable of defending against today’s most pressing threats.

The employment policy of SailPoint is to provide equal opportunity to all persons, and it is SailPoint’s policy to take affirmative action to employ and advance in employment protected veterans and individuals with disabilities.

It is SailPoint’s policy to recruit, hire, train and promote qualified individuals in all job titles, and ensure that all other personnel actions are administered without regard to race, color, religion, national origin, sex, military and/or veteran status, disability, or other legally protected status, and we will ensure that all employment decisions are based only on valid job requirements.

SailPoint does not discriminate on the basis of national origin or citizenship status as provided under the Immigration Reform and Control Act of 1986.

Employees and applicants shall not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in or may engage in any of the following activities: Filing a complaint; Assisting or participating in an investigation, compliance evaluation, hearing, or any other activity related to the administration of the affirmative action provisions of Section 503, VEVRAA, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; Opposing any act or practice made unlawful by Section 503, VEVRAA, or their implementing regulations in this part, or any other Federal, State or local law requiring equal opportunity for individuals with disabilities or protected veterans; or Exercising any other right protected by section 503, VEVRAA or their implementing regulations.

SailPoint will also provide reasonable accommodation to known physical or mental limitations of an otherwise qualified employee or applicant for employment, unless the accommodation would impose undue hardship on the operation of our business.

SailPoint’s affirmative action program contains an audit and reporting system which enables us to measure the effectiveness of our program, indicate any need for remedial action, determine the degree to which our objectives have been attained, determine whether protected veterans and individuals with disabilities had had the opportunity to participate in company-sponsored activities, measure our compliance with the program’s specific obligations, and document actions taken to comply with these obligations.