Endpoint Engineer

Antero Resources; Denver (CO); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Health care

401(k) with company match

Paid time off

Employee Assistance Program

Parking available

Job summary

Antero Resources in Denver seeks an IT Endpoint Manager to implement and optimize Microsoft Intune across Windows, mobile, and remote devices. You will design compliance policies, manage device enrollment, BYOD strategies, and integrate Intune with Azure AD and Defender while delivering reports to leadership.

The role requires 3+ years in endpoint management, with MD-102 or Endpoint Administrator certification preferred. This is a full-time, on-site Denver-based position.

Qualifications

• Bachelor’s degree in computer science, engineering, or related field.
• At least 3 years in endpoint management or systems engineering.
• Experience with Intune, Azure AD, Defender, and zero-trust architectures.

Responsibilities

• Implement, administer and optimize Intune across Windows, mobile, and remote devices.
• Design and enforce configuration profiles, compliance policies, and access controls.
• Package, deploy, and maintain apps using Intune and automation tools.
• Monitor endpoint security posture and patching in collaboration with IT Security.
• Manage device enrollment, BYOD strategies, and data protection.
• Integrate Intune with Azure AD, Defender, and SIEM for reporting and visibility.
• Produce leadership reports on compliance, device health and inventory.
• Serve as escalation contact for endpoint and Intune issues, assist Service Desk.
• Participate in change management and cloud-first/Autopilot implementations.

Skills

Intune

Endpoint Manager

Device management

Windows OS

Security/compliance

Azure AD

Documentation

ITSM tools

Communication

Education

Bachelor's degree in Computer Science or related field

MD-102 / Endpoint Administrator Associate

Tools

Azure AD

MD-102

Microsoft Defender for Endpoint

Intune / Endpoint Manager

Job description

Essential Duties & Responsibilities

General description of main/primary duties and responsibilities of the job, aptitude, level of complexity, span of control, autonomy, decision making and judgement. It is central and necessary to the satisfactory performance of the job. Includes the following and other duties as assigned.

• Implement, administer and continuously optimize Microsoft Intune and Endpoint Manager platforms to manage the full lifecycle of Windows, mobile, and remote workforce devices across corporate and field operations environments.
• Design and implement configuration profiles, compliance policies, and conditional access controls to ensure adherence to corporate cybersecurity standards and regulatory requirements.
• Responsible for packaging, deploying, and maintaining applications using Intune and automated deployment tools.
• Monitor endpoint compliance and security posture by managing patching, antivirus protection, encryption, security policies, and remediation initiatives in partnership with IT Security team.
• Manage mobile device enrollment, application protection policies, and BYOD strategies while ensuring data protection and user productivity.
• Lead the Integration of Intune with Azure AD, Microsoft Defender, SIEM tools, and other enterprise systems to maintain accurate reporting and security visibility.
• Develop and deliver compliance, device health, patch status, software inventory, and audit readiness reports to leadership, identifying trends and recommending corrective actions.
• Serve as escalation support for endpoint and Intune-related issues, collaborate with Service Desk and Infrastructure teams to resolve complex incidents and improve support processes.
• Participate in change management processes, testing new configurations and ensuring controlled rollouts.
• Evaluate, recommend, and implement modern endpoint management practices, including Autopilot, zero-touch provisioning, and cloud-first strategies.
• Perform other duties as assigned.

Essential Duties & Responsibilities

General description of main/primary duties and responsibilities of the job, aptitude, level of complexity, span of control, autonomy, decision making and judgement. It is central and necessary to the satisfactory performance of the job. Includes the following and other duties as assigned.

• Implement, administer and continuously optimize Microsoft Intune and Endpoint Manager platforms to manage the full lifecycle of Windows, mobile, and remote workforce devices across corporate and field operations environments.
• Design and implement configuration profiles, compliance policies, and conditional access controls to ensure adherence to corporate cybersecurity standards and regulatory requirements.
• Responsible for packaging, deploying, and maintaining applications using Intune and automated deployment tools.
• Monitor endpoint compliance and security posture by managing patching, antivirus protection, encryption, security policies, and remediation initiatives in partnership with IT Security team.
• Manage mobile device enrollment, application protection policies, and BYOD strategies while ensuring data protection and user productivity.
• Lead the Integration of Intune with Azure AD, Microsoft Defender, SIEM tools, and other enterprise systems to maintain accurate reporting and security visibility.
• Develop and deliver compliance, device health, patch status, software inventory, and audit readiness reports to leadership, identifying trends and recommending corrective actions.
• Serve as escalation support for endpoint and Intune-related issues, collaborate with Service Desk and Infrastructure teams to resolve complex incidents and improve support processes.
• Participate in change management processes, testing new configurations and ensuring controlled rollouts.
• Evaluate, recommend, and implement modern endpoint management practices, including Autopilot, zero-touch provisioning, and cloud-first strategies.
• Perform other duties as assigned.

Qualifications

Education, Experience, Licensure (minimum level required)

• Bachelor's Degree from an accredited institution.
• Field of Study: Computer Science, Engineering or related field.
• At least three (3) years of experience in endpoint management or systems engineering.
• At least two (2) years of administering Microsoft Intune/Endpoint Manager technology.
• Experience designing and supporting modern endpoint management and security solutions including Entra ID (Azure AD), Autopilot, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust architectures.
• Microsoft certifications such as MD-102, Endpoint Administrator Associate.

CORE COMPETENCIES

List and describe the required factors (i.e. knowledge, skills, abilities, software programs), that are needed for this role.

• Strong knowledge of Microsoft Endpoint Manager (Intune) and modern device management.
• Advanced understanding of operating systems (e.g. Windows, iOS, Android) and endpoint lifecycle.
• Advanced knowledge of patch management, compliance frameworks, and security standards.
• Familiarity with ITSM tools and ticketing systems.
• Demonstrated ability to maintain documentation, standards, and technical procedures related to endpoint engineering, device security, and lifecycle management.
• Ability to multi-task and manage prioritization of multiple requests within ticketing systems and leadership direction.
• Cross-functional collaboration skills with ability to act as a liaison between end user and internal IT department to meet business needs.
• Ability to analyze technical data, troubleshoot complex issues, and implement effective solutions.
• Effective written and verbal communication skills.

Supervisory Responsibilities

• Functions as an individual contributor with no supervisory responsibilities.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Excludes occasional visitation to the field - reference Travel section.

Office Related

• Job is primarily performed in an office setting with exposure to computer screens and requires regular use of a computer, keyboard, mouse, and multi-line telephone system.
• The noise level in the work environment is usually moderate.
• Specific vision abilities required by this job include close vision, distance vision and ability to adjust focus.

HOURS / SHIFTS

• Regular business hours.
• Available for on-call responsibilities on weekends and holidays for urgent issues or emergencies during off hours, as needed.

PHYSICAL DEMANDS

• Frequently required to sit, stand, walk, and reach with hands and arms.
• Minimally lift, push, carry and/or move up to 35 pounds.
• Regularly be able to bend, stoop, crouch, etc.
• Usual field site/location visits may present more strenuous exertion than office work.

TRAVEL

Approximate amount of time.

• Regular travel may be required to other locations.
• Approximate overnight travel is 15%.

Summary of Available Benefits*:

• Health Care eligibility including Medical & Prescription, Dental and Vision coverages
• Health Savings Account (HSA), Dependent Care FSA and Dependent Care FSA match
• Employer Paid Insurance: Basic Life and AD&D (employee, spouse, child), Short-Term and Long-Term Disability Coverage
• Voluntary Insurance: Life and AD&D, Accident, Long Term Care, Critical Illness, Hospital Indemnity, Pet Insurance, Legal Services
• Employee Assistance Program (EAP)
• 401(k) with employer matching
• Student Loan Repayment Reimbursement
• Vacation, Personal Choice Days (PCD), Sick Time
• Paid Parental Leave
• Company paid Holidays
• Wellness Reimbursement
• Subsidized Parking and Public Transportation
• Financial Well-being Program
• Professional Membership Reimbursement
• Employee Discount Programs
• Benefits eligibility is dependent on the employee’s job classification. Effective date is the first of the month after the event date or the first of the month if the event date is the first of the month.