Unified Endpoint Management Engineer

Rising Tide Digital; Mandaluyong; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Rising Tide Digital seeks an Endpoint Management Engineer to oversee Unified Endpoint Management across Windows, macOS, iOS, and Android. You will configure policies, enforce security baselines, and manage device lifecycle from enrollment to retirement.

You will work with Microsoft Intune, Entra ID, and Group Policy, ensuring policy deployment and endpoint compliance. Strong scripting and automation experience are highly valued.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related field.

Responsibilities

• Manage and administer UEM platforms across Windows, macOS, iOS, and Android.
• Configure and maintain endpoint policies, security baselines, and compliance standards.
• Enroll, provision, configure, monitor, reassign, and decommission devices.
• Administer Microsoft Intune, Windows Group Policy, Entra ID, and other endpoint management tech.
• Maintain standardized endpoint configurations and security policies.
• Monitor endpoint health, connectivity, and policy deployment.
• Troubleshoot enrollment, policy deployment, and connectivity issues.
• Develop automation scripts for repetitive endpoint tasks.

Skills

PowerShell scripting

Endpoint management

Analytical thinking

Documentation

Communication

Education

Bachelor's degree in IT/CS/CE

Tools

Microsoft Intune

Kaseya

Entra ID

Group Policy

Microsoft Defender

Job description

Job Description

Endpoint Management and Administration

• Manage and administer Unified Endpoint Management (UEM) platforms across Windows, macOS, iOS/iPadOS, and Android.

• Configure, implement, and maintain endpoint policies, security baselines, device restrictions, and compliance standards.

• Manage device enrollment, provisioning, configuration, monitoring, reassignment, and decommissioning.

• Administer Microsoft Intune, Windows Group Policy, Microsoft Entra ID, and other endpoint management technologies.

• Maintain standardized endpoint configurations and security policies based on IT and Information Security standards.

• Manage user-based and device-based policy assignments.

• Monitor endpoint compliance, health, connectivity, and policy deployment.

• Troubleshoot device enrollment, policy deployment, configuration, and connectivity issues.

• Review and optimize endpoint policies to prevent configuration conflicts and improve efficiency.

Endpoint Application Management

• Package, configure, test, and deploy applications using endpoint management platforms.

• Manage application assignments, deployment requirements, dependencies, detection rules, and uninstall configurations.

• Maintain application deployment standards for Windows and mobile devices.

• Troubleshoot application installation and deployment issues.

• Coordinate application packaging and deployment with application owners and vendors.

• Manage software updates and removal of outdated applications.

Endpoint Monitoring and Remote Management

• Monitor endpoint health, availability, security, and performance.

• Administer remote monitoring and management tools such as Kaseya, Microsoft Intune, and other RMM/UEM platforms.

• Configure monitoring policies, alerts, automation procedures, and endpoint actions.

• Perform remote troubleshooting and resolve endpoint issues.

• Develop automation scripts for repetitive endpoint administration tasks.

• Analyze endpoint monitoring data to identify recurring issues.

• Support the complete device lifecycle, from enrollment and provisioning to retirement and decommissioning.

Endpoint Security and Compliance

• Configure endpoint security policies in coordination with the Information Security team.

• Manage Microsoft Defender, BitLocker, Windows Firewall, Antivirus/EDR, Attack Surface Reduction, and device control policies.

• Implement endpoint security baselines and Conditional Access requirements.

• Monitor endpoint compliance with organizational security standards.

• Assist in resolving non-compliant or unsecured devices.

• Support security investigations by providing endpoint configuration and management information.

Identity and Access Management

• Integrate endpoint management platforms with Microsoft Entra ID, Active Directory, and Microsoft 365.

• Manage device registration and identity configurations.

• Support Conditional Access and device compliance integration.

• Configure group-based assignments and administrative scopes.

• Maintain identity and user access matrices to support authorization requirements.

Endpoint Automation

• Develop and maintain automation scripts using PowerShell and other scripting technologies.

• Automate endpoint configuration, software installation, remediation, and troubleshooting.

• Create reusable scripts and deployment packages.

• Integrate UEM platforms with APIs and other IT management systems when required.

Documentation and Standardization

• Prepare and maintain technical documentation, standard operating procedures (SOPs), and deployment guides.

• Document endpoint policies, application packages, scripts, and deployment processes.

• Maintain endpoint management configuration records.

• Prepare reports on endpoint compliance, enrollment, deployment, and management status.

• Establish and maintain standardized endpoint configuration baselines.

Incident, Problem, and Change Management

• Provide Level 2 and Level 3 technical support for endpoint management issues.

• Investigate recurring incidents and perform root cause analysis.

• Implement permanent solutions to recurring endpoint problems.

• Follow ITIL-based incident, problem, request, and change management processes.

• Conduct testing and validation before implementing changes in production environments.

Job Qualifications - Endpoint Management Engineer (Microsoft Intune)

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related field.

• At least 3-5 years of experience in IT Infrastructure, Endpoint Management, or System Administration.

• Hands-on experience with Microsoft Intune, Unified Endpoint Management (UEM), and Microsoft Entra ID.

• Knowledge of Windows, macOS, iOS, and Android device management, configuration, and troubleshooting.

• Experience in endpoint security, device compliance, application deployment, and security policies.

• Familiarity with Active Directory, Microsoft 365, Group Policy, and Conditional Access.

• Experience with PowerShell scripting, automation, and remote management tools such as Kaseya.

• Knowledge of Microsoft Defender, BitLocker, Windows Firewall, and endpoint security solutions.

• Experience providing Level 2/Level 3 technical support, incident management, and troubleshooting.

• Strong analytical, problem-solving, documentation, and communication skills.