Endpoint Engineer

Square10; New York (NY); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Professional certifications

Company training & certifications

Bonus potential

Medical, dental, disability coverage

401(k) plan

Job summary

Square10 is seeking an Endpoint Engineer to lead endpoint modernization for client projects. You’ll deploy Intune/Autopilot across Windows 11, configure MDM/MAM for iOS/Android, and move from SCCM/GPO to modern management. You’ll build security baselines and support Win32 deployments while mentoring teams.

You’ll also diagnose MS 365 issues, maintain endpoint estates, and join a 24/7 on-call rotation, earning Microsoft certifications. A strong client-facing presence is essential.

Qualifications

• 3–5 years in desktop engineering and app support.
• Hands-on experience with Intune, Autopilot, and security baselines.
• Experience migrating from SCCM/GPO to modern management.
• Strong ability to translate complex concepts for technical and non-technical audiences.
• Willingness to join a 24/7 on-call rotation.

Responsibilities

• Design, deploy, and support Microsoft Intune & Autopilot across Windows 11
• Configure MDM/MAM for iOS and Android
• Lead transitions from SCCM/GPO to modern Intune/Autopilot
• Build compliance & configuration profiles, security baselines, and Win32 app deployments
• Diagnose Microsoft 365 Apps for Enterprise issues
• Provide proactive operations and maintenance for endpoint estates
• Troubleshoot AD, GPO and app deployment issues
• Join a 24/7 on-call rotation
• Earn/maintain Microsoft certifications

Skills

Desktop engineering

App support

Technical communication

Client-facing

Time management

Tools

Intune

Autopilot

SCCM

Entra ID

AD/GPO/GPP

Graph API

PowerShell

WMI

Job description

We're not looking for someone who just knows Intune - we're looking for someone who loves solving problems, explaining the tricky stuff in plain English, and being the calm voice in a crisis. At Square10, clients stay with us because we pair deep expertise with personality. If you thrive on variety, like working with smart and candid teammates, and want a role where teaming never stops, this Endpoint Engineer role is for you.

Only candidates located in the greater Boston, New York City, Philly or Washington, DC metro areas will be considered.

WHY SQUARE10

We help IT leaders cut through complexity and make confident decisions. Our clients - leading law firms and professional services organizations - stick with us because we deliver measurable results and we're great to work with. If you're the person teams call in a crunch and you explain the hard stuff in plain English, you'll fit right in.

THE ROLE

You'll lead endpoint modernization for our clients - hands-on engineering plus clear, calm guidance. One day you're deploying Intune/Autopilot, the next you're troubleshooting MS365 add-ins or mentoring an in-house team. Variety is the norm; adaptability is the edge.

WHAT YOU'LL DO

• Design, deploy, and support Microsoft Intune & Autopilot across Windows 11
• Configure MDM/MAM for IOS and Android
• Lead transitions from SCCM/GPO to modern Intune/Autopilot
• Build compliance & configuration profiles, security baselines, and Win32 app deployments
• Diagnose Microsoft 365 Apps for Enterprise issues (performance addins)
• Provide proactive operations and maintenance for endpoint estates
• Troubleshoot AD, GPO and app deployment issues
• Join a 24/7 on-call rotation
• Earn/maintain Microsoft certifications

WHAT YOU'LL BRING

• 3-5 years in desktop engineering & app support (consulting/proservices a plus)
• Hands-on Intune, Autopilot compliance/config profiles, security baselines, Win32, MDM/MAM for IOS/Android
• SCCM expertise, including migrations to modern management
• Proven expertise moving orgs from SCCM/GPO to Intune/Autopilot
• Strong grasp of Entra ID device states and identity integration
• Proficiency with AD/GPO/GPP
• Knowledge of endpoint design, security, optimization practices
• Scripting/automation familiarity (PowerShell, WMI, Graph API)
• Ability to translate complex concepts for technical and non-technical audiences
• Self-directed, organized and steady under shifting priorities
• Professional client presence; sound judgment and escalation habits
• Curiosity and a continuous-learning mindset

NICE-TO-HAVE

• Endpoint hardening with Defender for Endpoint and Conditional Access
• Microsoft Purview (eDiscovery, DLP, Insider Risk)
• Advanced AVD & Windows 365 Cloud PC
• macOS device management (Intune or third-party)
• Compliance frameworks (NIST, ISO 27001, HIPAA, GDPR)

HOW WE WORK

We listen first, solve fast and keep communication open and honest - no jargon shields, no pedestal talk. You'll collaborate with people who are confident without being cocky and flexible without being fuzzy.

LOCATION AND BENEFITS

Hybrid by design: remote work balanced with client site visits across the greater Boston/NYC/Philly/Washington DC metro areas (~25-40% on-site; occasional travel beyond). Full time salary with bonus potential, medical, dental, disability, 401(k) and company-sponsored training and certifications. And yes - we actually encourage you to use your time off.

This role is an excellent opportunity for a self-starter who thrives in a learning-focused environment and is passionate about delivering exceptional service to clients.

Square10 is an Equal Opportunity Employer and considers all qualified applicants without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability, veteran status or any other protected characteristic under applicable law.