Endpoint Computing Manager
Virginia Commonwealth University
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Virginia Commonwealth University (VCU) Technology Services seeks an IT Security Engineer to lead the Endpoint Computing team within Information Security. You will guide endpoint management across Intune, ConfigMgr, Jamf Pro, and Citrix DaaS, while advancing cloud-native, Entra ID‑joined management and security posture.
You will collaborate with cross‑functional teams, manage vendors, and mentor four systems administrators to ensure compliant, scalable endpoint strategies for campus, research,
Qualifications
- Experience leading technical teams and managing performance.
- Administration of enterprise endpoint management platforms (Intune/ConfigMgr/Jamf Pro).
- Experience with virtual app/desktop delivery (Citrix, VMware Horizon) or similar.
- Familiarity with EDR tooling.
- Ability to communicate complex concepts to diverse stakeholders.
- Strong organizational skills and priority management.
- Understanding Entra ID/Azure AD and conditional access.
Responsibilities
- Lead Endpoint Computing team and strategic direction.
- Oversee Intune and ConfigMgr administration for Windows devices.
- Manage Jamf Pro for macOS/iOS and Entra ID integration.
- Oversee Citrix DaaS environments and capacity planning.
- Oversee CrowdStrike EDR deployment, policy tuning, and incident response.
- Drive modernization to cloud-native, Entra ID‑joined management.
Skills
Education
Tools
Job description
We are seeking an IT Security Engineer to join our team. This position leads the Endpoint Computing team within the Information Security office, providing strategic direction, technical oversight, and people management for the systems administrators responsible for enterprise endpoint management, virtual application delivery, and endpoint security platforms supporting the university. The role is responsible for driving the modernization of VCU's endpoint estate, including the transition to cloud-native, Entra ID‑joined device management, and for ensuring the team's priorities and technical decisions align with the Information Security office's broader security strategy and initiatives.
Technology Services
Information Security
Virginia Commonwealth University (VCU) Technology Services is a central IT organization supporting the academic, research, and administrative missions of the university. Technology Services provides scalable, secure, and innovative technology solutions to all VCU units.
This position is part of the Technology Services Information Security team, providing technical and administrative expertise in the support, integration, and modernization of VCU’s enterprise architecture. The role focuses on identity modernization, SSO integration, certificate lifecycle automation, and overall application administration across university systems and units.
This position leads the Endpoint Computing team within the Information Security office, providing strategic direction, technical oversight, and people management for the systems administrators responsible for enterprise endpoint management, virtual application delivery, and endpoint security platforms supporting the university. The role is responsible for driving the modernization of VCU's endpoint estate, including the transition to cloud-native, Entra ID‑joined device management, and for ensuring the team's priorities and technical decisions align with the Information Security office's broader security strategy and initiatives.
- Directly manage a team of four system administrators responsible for enterprise endpoint computing systems, including hiring, coaching, performance management, and professional development.
- Set priorities, assign work, and establish operational standards, documentation practices, and change management procedures for the endpoint computing team.
- Serve as an escalation point for complex or high‑impact endpoint, virtualization, and endpoint security issues.
- Represent the endpoint computing function in cross‑functional planning with server, network, identity, security, and application teams.
- Manage vendor relationships and licensing for endpoint management, virtualization, and endpoint security platforms.
- Oversee the administration of Microsoft Intune and Microsoft Configuration Manager (ConfigMgr) for Windows device management, including policy, compliance, application deployment, and patching.
- Guide the team's co‑management and migration strategy as workloads shift from ConfigMgr to cloud‑native Intune management.
- Ensure endpoint configuration baselines align with university security and compliance requirements.
- Oversee administration of Jamf Pro for macOS and iOS/iPadOS device management, including enrollment, configuration profiles, application deployment, and patching.
- Support integration of Jamf Pro with Entra ID for identity‑based device management and conditional access.
- Oversee the administration and availability of Citrix Desktop‑as‑a‑Service (DaaS) environments supporting faculty, staff, and student application access.
- Guide capacity planning, image management, and performance tuning for virtual desktop and application delivery.
- Oversee deployment, health, and policy tuning of the CrowdStrike endpoint detection and response (EDR) platform across managed endpoints.
- Partner with the Security Operations team on incident response, threat containment, and remediation involving managed endpoints.
- Monitor endpoint security posture and compliance metrics and report on trends to university leadership.
- Lead the team's roadmap for migrating endpoints to cloud‑native, Entra ID‑joined management, reducing reliance on legacy on‑premises infrastructure.
- Evaluate and pilot new endpoint technologies and approaches, developing migration and rollback plans for enterprise rollout, in alignment with Information Security priorities.
- Partner with the identity and IAM teams on conditional access, device compliance, and Zero Trust alignment for managed endpoints.
- Champion the use of scripting and automation (e.g., PowerShell, Python, Bash) to reduce manual effort in provisioning, patching, and reporting.
- Establish metrics and reporting for endpoint compliance, patch levels, and security posture across managed platforms.
- Participate in an on‑call rotation, or ensure appropriate team coverage, for after‑hours endpoint or availability issues.
The summary outlines the primary duties of this role. However, other duties may be assigned as needed.
- Demonstrated experience managing or leading a technical team, including assigning work, coaching staff, and managing performance.
- Demonstrated experience administering enterprise endpoint management platforms such as Microsoft Intune, Configuration Manager, or Jamf Pro.
- Experience with virtual application or desktop delivery platforms (e.g., Citrix, VMware Horizon) or comparable enterprise technologies.
- Familiarity with endpoint detection and response (EDR) or other endpoint security tooling.
- Ability to communicate complex technical concepts to both technical and nontechnical stakeholders, including university leadership.
- Strong organizational skills with the ability to manage multiple projects and competing priorities simultaneously.
- Foundational understanding of identity and access management concepts, including Entra ID / Azure AD and conditional access.
- Demonstrated ability to work in and foster an environment of respect, professionalism and civility with a population of faculty, staff, and students from all backgrounds and experiences, or a commitment to do so as a staff member at VCU.
- Bachelor's degree in Information Systems, Computer Science, Information Technology, or a related field, or equivalent combination of education and experience.
- Hands‑on experience with Microsoft Entra ID‑joined (cloud‑native) device management strategies and co‑management transitions from ConfigMgr to Intune.
- Experience with CrowdStrike or comparable EDR platforms in an enterprise environment.
- Experience in higher education or a large, decentralized enterprise IT environment.
- Relevant certifications such as Microsoft Certified: Endpoint Administrator Associate, Jamf Certified Admin, CompTIA Security+, or equivalent.
$90,000- $100,000
All full‑time university staff are eligible for VCU’s robust benefits package that includes comprehensive health benefits, paid annual and holiday leave, generous tuition benefits, retirement planning and savings options, tax‑deferred annuity and cash match programs, employee discounts, well‑being resources, abundant opportunities for career development and advancement, and more.
Exempt
40
No
Yes
Hybrid
24342Y - Security Systems Manager 2
Contact Name: Mary Teller
Contact Email: mkteller@vcu.edu
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
