Endpoint Engineer: Cloud MDM & Intune Deployments

Apex Fintech Solutions LLC; Austin (TX); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Healthcare benefits

401k match

Parental leave

Hybrid work schedule

Tuition reimbursement

Calm app subscription

Job summary

Apex Fintech Solutions LLC is seeking an Endpoint Engineer to own device enrollment, configuration, security, patching, and retirement. You will manage Intune for Windows and Kandji for Macs, tying device trust to access with Entra ID Conditional Access. Jamf Pro experience is a plus.

You will migrate policies to cloud-native MDM, automate deployments, and maintain RBAC across platforms. A collaborative security-focused team environment is expected, with a hybrid work setup.

Qualifications

• 2+ years in systems/endpoint engineering with hands-on MDM administration (Intune, Kandji or Jamf Pro).
• Experience with modern MDM and cloud-native configuration.
• Strong scripting ability in PowerShell and Python.

Responsibilities

• Own end-to-end Intune administration: compliance policies, config profiles, app deployment, Autopilot/WEnrollment, RBAC design.
• Manage Kandji or Jamf Pro for Apple devices and ABM integration.
• Design and enforce Entra ID Conditional Access policies with security/identity teams.
• Migrate legacy GPOs to cloud-native MDM configurations and document gaps.
• Build RBAC models across Intune, Entra ID, Kandji/Jamf Pro.
• Develop automation/scripts for endpoint and identity workflows (PowerShell, Python, Graph API).
• Support BYOD MDM for Windows/Mac/Linux/Android devices.

Skills

Intune administration

Kandji/Jamf Pro

ABM/Apple Business Manager

GPO to cloud migration

Entra ID/Azure AD

Conditional Access

Scripting (PowerShell/Python)

Windows/macOS proficiency

RBAC modeling

Documentation

Linux/macOS admin

Tools

Microsoft Intune

Jamf Pro

Kandji

Apple Business Manager

Azure AD/Entra ID

PowerShell

Python

Microsoft Graph API

Job description

Apex Fintech Solutions LLC is seeking an Endpoint Engineer to own device enrollment, configuration, security, patching, and retirement. You will manage Intune for Windows and Kandji for Macs, tying device trust to access with Entra ID Conditional Access. Jamf Pro experience is a plus.

You will migrate policies to cloud-native MDM, automate deployments, and maintain RBAC across platforms. A collaborative security-focused team environment is expected, with a hybrid work setup.