Endpoint Engineer

Tucker Parker Smith Group (TPS Group); Irvine (CA); Ibrido; USD 83.000 - 96.000; Tempo pieno

Descrizione del lavoro

Tucker Parker Smith Group seeks a Senior Endpoint Engineer to design, implement, and maintain modern endpoint management for a global Windows fleet. You will drive automation, patching, and secure configuration using Intune, MECM, Autopilot and Azure AD.

The role requires 4+ years with Intune/MECM, strong PowerShell skills, and a security-first mindset. Hybrid work from Irvine with on-site M/W/Th, collaborating with IT, security, and infrastructure teams.

Competenze

• Bachelor's degree or equivalent in CS/IS/Engineering.
• 4+ years managing Intune and MECM in enterprise environments.
• 4+ years in endpoint lifecycle management and patching.
• ITIL Foundation or ITSM knowledge (preferred).
• Microsoft Intune/Endpoint Administrator certifications (preferred).
• Jamf 300/400 certification preferred.

Mansioni

• Architect, implement, and optimize Intune and MECM for enterprise endpoints.
• Translate GPOs into cloud-native Intune configuration and compliance policies.
• Oversee Windows 10/11 image deployment using Autopilot with zero-touch provisioning.
• Define hardware/software lifecycle standards with Global IT leadership.
• Automate deployments for applications, patches, and drivers.
• Manage third-party patching solutions (PatchMyPC) and software distribution.
• Implement Defender for Endpoint and enforce security baselines.
• Collaborate across Security, Networking, and Cloud teams on endpoint strategy.

Conoscenze

PowerShell scripting

Automation

Collaboration

Problem solving

Security mindset

Formazione

Bachelor's degree in Computer Science, Information Systems, Engineering

4+ years managing Intune and MECM/SCCM in enterprise

4+ years in endpoint lifecycle management, patching, compliance, and app delivery

Strumenti

Intune

MECM (SCCM)

Autopilot

Azure AD/Entra ID

PowerShell

PatchMyPC

Jamf Pro

Descrizione del lavoro

Location:

Irvine, CA (Hybrid - On-site M/W/Th)

Duration:

12-Month Assignment - Potential to Extend or Convert

Pay Range:

$60-70 per hour

Company Overview

Our client, a global leader in data storage and digital innovation is seeking a highly skilled Endpoint Engineer to join the Global IT Endpoints Team. This individual will be responsible for designing, implementing, and maintaining modern endpoint management solutions for a global fleet of Windows devices. The ideal candidate combines deep technical expertise with a business-focused mindset to deliver secure, reliable, and scalable endpoint solutions that support the company's mission of driving innovation in data storage technology.

Position Summary

The Senior Endpoint Engineer plays a critical role in shaping and delivering a secure, modern, and efficient endpoint experience for thousands of employees worldwide. This position requires advanced technical proficiency, a passion for automation and innovation, and the ability to collaborate across IT, security, and infrastructure teams.

Key Responsibilities:

• Architect, implement, and optimize Microsoft Intune and MECM (SCCM) solutions for enterprise-scale endpoint management.
• Translate existing Group Policy Objects (GPOs) into scalable, cloud-native Intune configuration and compliance policies.

Windows Deployment & Lifecycle

• Oversee deployment and maintenance of Windows 10/11 images using Autopilot, ensuring zero-touch provisioning.
• Define and maintain hardware/software lifecycle standards in coordination with Global IT leadership.

Application & Patch Management

• Automate application, patch, and driver deployments to ensure enterprise-wide consistency and compliance.
• Design, implement, and manage third-party patching solutions (e.g., PatchMyPC).
• Manage software distribution, firmware updates, and remote support tools to optimize endpoint efficiency.
• Develop servicing plans to balance innovation, stability, and security.

Security & Compliance

• Implement Defender for Endpoint and enforce security baselines to protect devices.
• Ensure adherence to global IT controls, compliance frameworks, and regulatory standards.

Automation & Scripting

• Develop and maintain PowerShell scripts for automation, reporting, and system administration.
• Automate remediation, provisioning, and compliance enforcement tasks.
• Serve as a Tier 3 escalation point for complex OS, application, and endpoint hardware issues.
• Collaborate with Service Desk and regional IT teams to ensure rapid issue resolution and root cause analysis.

Cross-Functional Collaboration

• Partner with Security, Networking, and Cloud teams to align endpoint management strategies with enterprise architecture.
• Participate in cross-functional infrastructure and digital workplace initiatives.

User Experience & Documentation

• Enhance user productivity by ensuring seamless onboarding, provisioning, and device management.
• Develop and maintain technical documentation, SOPs, and internal training materials.
• Drive continuous service improvement through R&D, validation, and pilot programs.
• Support enterprise initiatives such as Windows 11 rollout and Digital Experience Monitoring (DEX) adoption.

Key Skills & Qualifications:

Technical Expertise

• Deep knowledge of Windows 10/11, Intune, MECM (SCCM), Windows Autopilot, Azure AD/Entra ID, and the Microsoft 365 ecosystem.
• Experience in application packaging, software distribution, OS patching, and endpoint hardening.
• Advanced PowerShell scripting (experience with PowerShell App Deploy Kit preferred).
• Proven experience managing large enterprise endpoint environments (20k+ endpoints).
• Familiarity with Jamf Pro for macOS/iOS management is a plus.
• Strong understanding of hybrid identity management (Azure AD, Group Policy, Conditional Access).
• Broad experience with enterprise IT infrastructure, including networks, security suites, and SaaS/O365 applications.

Education & Certifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field (or equivalent experience).
• 4+ years managing Intune and MECM/SCCM in enterprise environments.
• 4+ years in endpoint lifecycle management, patching, compliance, and application delivery.
• Preferred Certifications:
• Microsoft Certified: Intune Expert or Endpoint Administrator Associate
• ITIL Foundation certification or ITSM knowledge
• Jamf 300/400 certification (preferred, not required)