Endpoint Engineer

Jobtailor; Denver (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

Jobtailor in Denver, CO, is seeking an experienced Endpoint Management Engineer to implement, optimize, and support Microsoft Intune/Endpoint Manager for a mobile and remote workforce. You will design policies, manage PKI, and ensure compliant configurations across Windows and mobile devices.

You will integrate with Azure AD and Defender, generate leadership reports on patch status and device health, and contribute to security posture improvements through SIEM integrations and remediation

Qualifications

• Bachelor’s degree in Computer Science, Engineering or related field.
• At least three years of experience in endpoint management or systems engineering.
• At least two years of administering Microsoft Intune/Endpoint Manager.
• Experience designing and supporting modern endpoint management and security solutions including Entra ID (Azure AD), Autopilot, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust architectures.
• Microsoft certifications such as MD-102, Endpoint Administrator Associate.
• Strong knowledge of Microsoft Endpoint Manager (Intune) and modern device management.
• Advanced understanding of operating systems (Windows, iOS, Android) and endpoint lifecycle.
• Advanced knowledge of patch management, compliance frameworks, and security standards.
• Familiarity with ITSM tools and ticketing systems.
• Ability to maintain documentation, standards, and technical procedures related to endpoint engineering, device security, and lifecycle management.
• Ability to multi-task and prioritize multiple requests within ticketing systems and leadership direction.
• Ability to analyze technical data, troubleshoot complex issues, and implement effective solutions.
• Effective written and verbal communication skills.
• Available for on-call responsibilities on weekends and holidays for urgent issues or emergencies during off hours, as needed
• Minimally lift, push, carry and/or move up to 35 pounds
• Regular travel may be required to other locations; approximate overnight travel is 15%

Responsibilities

• Implement, administer, and continuously optimize Microsoft Intune and Endpoint Manager platforms for Windows, mobile, and remote workforce devices
• Design and implement configuration profiles, compliance policies, and conditional access controls
• Package, deploy, and maintain applications using Intune and automated deployment tools
• Monitor endpoint compliance and security posture through patching, antivirus protection, encryption, security policies, and remediation initiatives
• Manage mobile device enrollment, application protection policies, and BYOD strategies
• Integrate Intune with Azure AD, Microsoft Defender, SIEM tools, and other enterprise systems
• Develop and deliver compliance, device health, patch status, software inventory, and audit readiness reports to leadership
• Identify trends and recommend corrective actions
• Provide escalation support for endpoint and Intune-related issues
• Collaborate with Service Desk and Infrastructure teams to resolve complex incidents and improve support processes
• Participate in change management, test new configurations, and ensure controlled rollouts
• Evaluate, recommend, and implement modern endpoint management practices, including Autopilot, zero-touch provisioning, and cloud-first strategies
• Function as an individual contributor with no supervisory responsibilities

Skills

Intune / Endpoint Manager

Windows/macOS/iOS/Android

Zero Trust security

Azure AD Entra ID

Policy configuration

Scripting / IT automation

Documentation

On-call support

Education

Bachelor’s Degree in Computer Science, Engineering or related field

MD-102

Endpoint Administrator Associate

Tools

Microsoft Defender for Endpoint

Azure AD

SIEM Tools

ITSM Tools

Ticketing Systems

Autopilot

Conditional Access

Job description

• Implement, administer, and continuously optimize Microsoft Intune and Endpoint Manager platforms for Windows, mobile, and remote workforce devices
• Design and implement configuration profiles, compliance policies, and conditional access controls
• Package, deploy, and maintain applications using Intune and automated deployment tools
• Monitor endpoint compliance and security posture through patching, antivirus protection, encryption, security policies, and remediation initiatives
• Manage mobile device enrollment, application protection policies, and BYOD strategies
• Integrate Intune with Azure AD, Microsoft Defender, SIEM tools, and other enterprise systems
• Develop and deliver compliance, device health, patch status, software inventory, and audit readiness reports to leadership
• Identify trends and recommend corrective actions
• Provide escalation support for endpoint and Intune-related issues
• Collaborate with Service Desk and Infrastructure teams to resolve complex incidents and improve support processes
• Participate in change management, test new configurations, and ensure controlled rollouts
• Evaluate, recommend, and implement modern endpoint management practices, including Autopilot, zero-touch provisioning, and cloud-first strategies
• Function as an individual contributor with no supervisory responsibilities

Requirements

• Bachelor’s Degree from an accredited institution in Computer Science, Engineering or related field
• At least three (3) years of experience in endpoint management or systems engineering
• At least two (2) years of administering Microsoft Intune/Endpoint Manager technology
• Experience designing and supporting modern endpoint management and security solutions including Entra ID (Azure AD), Autopilot, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust architectures
• Microsoft certifications such as MD-102, Endpoint Administrator Associate
• Strong knowledge of Microsoft Endpoint Manager (Intune) and modern device management
• Advanced understanding of operating systems (e.g. Windows, iOS, Android) and endpoint lifecycle
• Advanced knowledge of patch management, compliance frameworks, and security standards
• Familiarity with ITSM tools and ticketing systems
• Ability to maintain documentation, standards, and technical procedures related to endpoint engineering, device security, and lifecycle management
• Ability to multi-task and prioritize multiple requests within ticketing systems and leadership direction
• Ability to analyze technical data, troubleshoot complex issues, and implement effective solutions
• Effective written and verbal communication skills
• Available for on-call responsibilities on weekends and holidays for urgent issues or emergencies during off hours, as needed
• Minimally lift, push, carry and/or move up to 35 pounds
• Regular travel may be required to other locations; approximate overnight travel is 15%

Core Competencies

Demonstrates expertise in Microsoft Intune and Endpoint Manager for managing and securing endpoint devices, with a strong focus on compliance, patch management, and integration with Azure AD and Microsoft Defender. Capable of analyzing technical data and troubleshooting complex issues while maintaining effective communication and documentation standards.

Highest-signal resume keywords

• Microsoft Intune Administration
• Endpoint Management
• Azure AD Integration
• Patch Management
• Microsoft Certifications (MD-102)

ATS Optimization Keywords

Hard Skills

• Endpoint Lifecycle Management
• Configuration Profiles
• Compliance Policies
• Conditional Access Controls
• Application Packaging and Deployment
• Security Policies
• Remediation Initiatives
• Zero Trust Architectures
• Autopilot
• Device Health Reporting

Soft Skills

• Effective Communication
• Multi-tasking
• Analytical Problem Solving

Certifications & Qualifications

• MD-102
• Endpoint Administrator Associate

Industry Keywords

• Endpoint Security
• BYOD Strategies
• Change Management
• Compliance Frameworks
• Technical Documentation

Tools & Technologies

• Microsoft Defender for Endpoint
• SIEM Tools
• ITSM Tools
• Ticketing Systems