Endpoint Management Engineer

Rising Tide Digital; Mandaluyong; On-site; PHP 600,000 - 840,000; Full time

Job summary

Rising Tide Digital is seeking an experienced Endpoint Administrator to manage Microsoft Intune, Entra ID, and Active Directory across Windows, macOS, iOS, and Android environments. You will automate tasks with PowerShell and coordinate with the IT Security team on Defender, BitLocker, and CA policies.

The role requires 3–5 years in endpoint administration, plus ITIL-aligned Change Management experience. Familiarity with Kaseya and ServiceNow is a plus. Hybrid/onsite work in a dynamic team.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field with 3–5 years of endpoint administration or systems engineering experience.
• Strong hands-on experience with Microsoft Intune, Entra ID, Active Directory, GPO, and endpoint management across Windows, macOS, iOS, and Android.
• Proficient in PowerShell scripting and automation, with experience configuring Defender, BitLocker, Conditional Access, and ASR policies.
• Experience packaging and deploying applications using Win32 and MSI installers; familiarity with ITSM tools such as Kaseya and ServiceNow.
• Certifications preferred: MD-102 and ITIL Foundation.

Responsibilities

• Administer Microsoft Intune, Entra ID, GPO, and RMM tools; implement device security baselines and compliance policies across multi-OS environments.
• Package, test, and deploy Win32, LOB, and mobile apps; configure detection rules and automated patching.
• Integrate devices with Entra ID and Active Directory; configure Conditional Access and manage Defender, BitLocker, Windows Firewall, and EDR policies.
• Develop PowerShell scripts to automate device remediation, software deployment, and routine admin tasks; configure RMM for proactive monitoring and alerts.
• Handle Tier 2/3 endpoint issues; perform RCA and follow ITIL-based Change Management and SOP documentation.

Skills

Intune

Entra ID

Active Directory

GPO

PowerShell scripting

RMM tools

Kaseya

ServiceNow

Security policies

Conditional Access

Education

Bachelor's degree in IT/CS or related field

Tools

Kaseya

ServiceNow

RMM tooling

Job description

Job Description

Key Responsibilities

• Endpoint Management: Administer Microsoft Intune, Entra ID, Group Policy Objects (GPO), and Remote Monitoring and Management (RMM) tools such as Kaseya. Implement device security baselines, compliance policies, and manage endpoint lifecycles from enrollment to decommissioning across multiple operating systems.

• Application Deployment: Package, test, and deploy Win32, line-of-business (LOB), and mobile applications. Configure detection rules, application dependencies, and automated patch management.

• Security and Identity Management: Integrate devices with Entra ID and Active Directory, configure Conditional Access, and manage Microsoft Defender, BitLocker, Windows Firewall, and Endpoint Detection and Response (EDR) policies in coordination with the Information Security team.

• Automation and Monitoring: Develop PowerShell scripts to automate device remediation, software deployment, and routine administrative tasks. Configure RMM tools for proactive monitoring, alerting, and issue prevention.

• Technical Support and ITIL Compliance: Handle complex Tier 2 and Tier 3 endpoint issues, conduct Root Cause Analysis (RCA) for recurring problems, and follow ITIL-based Change Management processes and documentation standards, including Standard Operating Procedures (SOPs).

Job Qualifications

• Education and Experience: Bachelor's degree in Information Technology, Computer Science, or a related field, with 3-5 years of experience in endpoint administration or systems engineering.

• Technical Expertise: Strong hands-on experience with Microsoft Intune, Entra ID, Active Directory, GPO, and endpoint management across Windows, macOS, iOS, and Android platforms.

• Scripting and Security: Proficient in PowerShell scripting and automation, with experience configuring Microsoft Defender, BitLocker, Conditional Access, and Attack Surface Reduction (ASR) policies.

• Application Packaging and Tools: Experience packaging and deploying applications using Win32 and MSI installers, along with familiarity with RMM and IT Service Management (ITSM) tools such as Kaseya and ServiceNow.

• Certifications (Preferred): Microsoft Certified: Endpoint Administrator Associate (MD-102) and ITIL Foundation certification.

Linux Administration Cloud Computing Automation Scripting CI/CD Monitoring Tools Networking Security Best Practices Virtualization