Desktop / Endpoint Engineer

SEI Trust Company; Pennsylvania; On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Healthcare (medical, dental, vision)

401(k) match

Education assistance

Paid holidays

PTO

Parental leave

Volunteer days

Job summary

SEI Trust Company seeks a Desktop/Endpoint Engineer to deliver secure, modern endpoint services across a global enterprise. You will support core endpoint services and advance expertise in Intune, MECM/SCCM, Windows 11, Autopilot, and automation.

You will manage provisioning, deployment, patching, and compliance, while partnering with Service Desk, Security, and Engineering teams to ensure health and security of endpoints.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/MIS/IT.
• 3+ years of experience in endpoint support or desktop engineering.
• Experience supporting Windows desktop OS in an enterprise.
• Working experience with Intune and MECM/SCCM or comparable endpoint mgmt platforms.
• Ability to independently manage routine deployments and troubleshoot complex endpoint issues.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Willingness to own smaller engineering initiatives and expand cloud management skills.

Responsibilities

• Administer and support enterprise endpoint management platforms across a global environment.
• Manage device provisioning, software deployment, patch management, and compliance monitoring.
• Configure endpoints using Microsoft Intune and MECM/SCCM.
• Monitor endpoint health and troubleshoot device management issues.
• Build and maintain Intune profiles, policies, and enrollment workflows.
• Support Windows Autopilot provisioning and enrollment activities.
• Contribute to Windows 11 deployment and modernization efforts.
• Identify opportunities to improve endpoint management, automation, and user experience.
• Package, test, deploy, and support enterprise applications.
• Monitor deployment success and resolve installation issues.
• Coordinate application rollout activities and change requests.
• Administer endpoint security technologies including BitLocker, Defender, and LAPS.
• Monitor compliance and coordinate remediation activities.
• Provide Level 2/3 support for OS, app, and endpoint management issues.
• Collaborate with Service Desk, Infrastructure, Security, and Engineering teams.

Skills

Endpoint mgmt

Intune

MECM/SCCM

Windows 11

Autopilot

PowerShell

Troubleshooting

Education

Bachelor's degree in Computer Science / MIS / IT

Tools

BitLocker

LAPS

Microsoft Defender

Active Directory

Group Policy

Job description

SEI is seeking a Desktop/Endpoint Engineer. Join a team responsible for delivering a secure, modern, and reliable endpoint experience across a global enterprise. As a Desktop Engineer, you will independently support core endpoint services while continuing to deepen your expertise in Microsoft Intune, MECM/SCCM, Windows 11, Autopilot, endpoint security, software deployment, and automation.

What you will do:

Endpoint Administration & Support

• Support and maintain enterprise endpoint management platforms across a global environment.
• Manage device provisioning, software deployment, patch management, and compliance monitoring.
• Manage endpoint configurations using Microsoft Intune and MECM/SCCM.
• Monitor endpoint health and troubleshoot device management issues.

Modern Workplace Technologies

• Build and maintain Microsoft Intune configuration profiles, compliance policies, and device enrollment processes.
• Support Windows Autopilot provisioning and enrollment activities.
• Contribute to Windows 11 deployment and modernization initiatives.
• Identify opportunities to improve endpoint management, automation, and user experience.

Application Deployment & Lifecycle Management

• Package, test, deploy, and support enterprise applications.
• Monitor software deployment success and resolve installation issues.
• Prepare and support application change requests through established change management processes.
• Coordinate assigned application rollout activities.

Security & Compliance

• Administer endpoint security technologies including BitLocker, LAPS, Microsoft Defender, and device compliance policies.
• Support security initiatives designed to protect enterprise devices and data.
• Monitor compliance and coordinate remediation activities.

Technical Troubleshooting

• Provide Level 2/3 support for operating system, application, and endpoint management issues.
• Investigate and resolve device deployment, compliance, and configuration problems.
• Work closely with Service Desk, Infrastructure, Security, and Engineering teams.
• Participate in an after-hours support rotation as needed.

What we need from you:

• Bachelor's degree in Computer Science, MIS, Information Technology, or equivalent practical experience.
• 3 years of experience in endpoint support, desktop engineering, systems administration, or a related technology role.
• Experience supporting Windows desktop operating systems in an enterprise environment.
• Working experience with Microsoft Intune, MECM/SCCM, or comparable endpoint management platforms.
• Ability to independently manage routine deployments and troubleshoot complex endpoint issues.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Readiness to own smaller engineering initiatives and continue developing cloud management and automation skills.

What we would like from you:

• Experience administering Microsoft Intune and MECM/SCCM preferred.
• Working knowledge of Windows Autopilot and PowerShell scripting desired.
• Experience with Active Directory, Group Policy, BitLocker, Microsoft Defender, or LAPS preferred.
• Experience with application packaging, software deployment, patching, and change management.
• Exposure to macOS device management, VDI technologies, or large enterprise networks.

SEI's competitive advantage:

• healthcare (medical, dental, vision, prescription, wellness, EAP, FSA)
• life and disability insurance (premiums paid for base coverage)
• 401(k) match
• education assistance
• commuter benefits
• up to 11 paid holidays/year
• 21 days PTO/year pro-rated for new hires which increases over time
• paid parental leave
• back-up childcare arrangements
• paid volunteer days
• a discounted stock purchase plan
• investment options
• access to thriving employee networks and more

We are a technology and asset management company delivering on our promise of building brave futures (SM)-for our clients, our communities, and ourselves. Come build your brave future at SEI.

The position title reflected in this job description is aligned with SEI's current internal job architecture. As part of SEI's role and career framework, internal job titles may not directly correspond to external market titles and may differ from titles previously assigned during an employee's tenure or at the time of hire.

SEI is an Equal Opportunity Employer and so much