Cloud Endpoint Engineer: Intune, Management & Security

Oaktree; Los Angeles (CA); On-site; USD 110,000 - 150,000; Full time

Job summary

Oaktree is seeking an experienced Endpoint Management Engineer to own and evolve the modern endpoint management platform across Windows devices. You will oversee provisioning, enrollment, configuration, compliance, and deployment, while guiding the shift from SCCM/MECM and Group Policy to cloud-native solutions.

You will design and optimize Intune policies, support Entra joined/hybrid-joined devices, and develop standardized provisioning and update processes.

Qualifications

• 5+ years of relevant experience in endpoint management or similar role.
• Strong troubleshooting skills across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.
• Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.

Responsibilities

• Own and continuously improve the modern endpoint management platform (Intune, Autopilot, Entra ID) and related technologies.
• Manage full Windows endpoint lifecycle from provisioning to retirement.
• Lead transition from SCCM/MECM and GPO-based management to cloud-native endpoint management.
• Leverage AI-assisted tools and automation for operational efficiency and reporting.

Skills

Windows OS troubleshooting

Endpoint policy

Application deployment

Network connectivity

Certificates & profiles

User profiles

Endpoint security controls

Technical writing

Tools

Intune

SCCM / MECM

Group Policy

PowerShell

Azure Entra ID

Microsoft Defender

Windows Autopilot

Job description

Oaktree is seeking an experienced Endpoint Management Engineer to own and evolve the modern endpoint management platform across Windows devices. You will oversee provisioning, enrollment, configuration, compliance, and deployment, while guiding the shift from SCCM/MECM and Group Policy to cloud-native solutions.

You will design and optimize Intune policies, support Entra joined/hybrid-joined devices, and develop standardized provisioning and update processes.