Endpoint & Cloud Security Engineer II

Spring EQ; Philadelphia (Philadelphia County); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

401k Company Match

Annual Charitable Matching Gift Prog

Company Holidays

Credit Union Membership

Dependent Care Plan

Disability Insurance

Employee Assistance Program

Life Insurance

Medical Insurance

Paid Time Off Plan

Vision Insurance

Weekly Non-Management Dinner Benefit

Job summary

Spring EQ is seeking an Endpoint Systems Engineer II to design, manage, and support the organization’s endpoint environment across Windows, macOS, Cloud PCs, and related platforms. This role owns configuration, deployment, policy management, automation, and lifecycle support of desktops and devices using Intune, Mosyle, Entra ID, Windows 365 Cloud PCs, Group Policy, MDM, and related tools.

This position partners closely with IT operations, service desk, security, and infrastructure teams to

Qualifications

• Strong understanding of MDM concepts and endpoint security.
• Experience with Microsoft Entra ID and Conditional Access.
• Ability to troubleshoot complex endpoint, identity, policy, and app deployment issues.
• Excellent documentation and cross-team collaboration.

Responsibilities

• Manage Windows endpoints using Intune, Group Policy, configuration profiles, compliance policies, application deployment, update rings, and endpoint security baselines.
• Manage macOS endpoints using Mosyle, including device enrollment, configuration profiles, software deployment, security controls, and compliance enforcement.
• Administer and support Windows 365 Cloud PCs, including provisioning, assignment, policy configuration, troubleshooting, and lifecycle management.
• Design and maintain endpoint management standards for Windows, macOS, mobile devices, and virtual or cloud desktop environments.
• Configure and maintain Microsoft Entra ID device join, hybrid join, conditional access, device compliance, and identity-based access policies.
• Package, deploy, and update applications across managed endpoints using Intune, Mosyle, scripting, and automation tools.
• Develop and maintain endpoint security policies, including encryption, antivirus or EDR integration, firewall settings, patching, local admin controls, and device compliance.
• Create, review, and maintain Group Policy Objects, MDM policies, configuration profiles, and security baselines.
• Troubleshoot complex endpoint issues involving operating systems, user profiles, authentication, networking, device enrollment, application deployment, and policy conflicts.
• Automate endpoint administration tasks using PowerShell, shell scripting, Microsoft Graph, or other relevant tools.
• Maintain documentation for endpoint standards, configuration policies, troubleshooting procedures, and operational processes.
• Collaborate with security teams to support audit requirements, vulnerability remediation, endpoint hardening, and compliance initiatives.
• Evaluate new endpoint technologies and recommend improvements to increase security, reliability, automation, and user experience.

Skills

MDM concepts

Entra ID

Endpoint security

Troubleshooting

Documentation

Collaboration

Education

Bachelor’s degree in IT/CS

3–5 years endpoint engineering

Tools

Microsoft Intune

Mosyle

Group Policy

PowerShell

Microsoft Entra ID

Azure Virtual Desktop

Job description

Spring EQ is seeking an Endpoint Systems Engineer II to design, manage, and support the organization’s endpoint environment across Windows, macOS, Cloud PCs, and related platforms. This role owns configuration, deployment, policy management, automation, and lifecycle support of desktops and devices using Intune, Mosyle, Entra ID, Windows 365 Cloud PCs, Group Policy, MDM, and related tools.

This position partners closely with IT operations, service desk, security, and infrastructure teams to