Endpoint Engineer III

Applied Medical; Rancho Santa Margarita (CA); On-site; USD 71,000 - 95,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Mentorship

Wellness activities

Education reimbursement

401(k) with employer match

Generous vacation

Paid holidays

Job summary

Applied Medical is seeking an Endpoint Engineer III to secure and manage our enterprise endpoint environment across Windows, macOS, iOS, and Android, using Intune, MECM, Autopilot, and JAMF.

You will develop PowerShell scripts, automate tasks, enforce security controls, and lead OS upgrades and cloud transformation with cross-functional teams.

Based in California, the role offers competitive pay, comprehensive benefits, and education reimbursement.

Qualifications

• Administers Intune, Endpoint Manager, and Windows Autopilot in production environments.
• Implements enterprise endpoint security and compliance controls in regulated environments.
• Writes PowerShell scripts for administration and automation.

Responsibilities

• Manages enterprise endpoints using Intune, MECM, Autopilot, and JAMF.
• Diagnoses and resolves complex device, OS, app, and deployment issues.
• Develops PowerShell scripts and automation for endpoint management and reporting.
• Enforces endpoint security, patching, and zero trust concepts.
• Supports Windows, macOS, iOS, and Android devices.
• Plans OS upgrades, device refreshes, migrations, and cloud initiatives.
• Collaborates with stakeholders to communicate status and resolve issues.
• Uses endpoint analytics to improve device health and compliance.

Skills

PowerShell scripting

Endpoint management

Microsoft Intune

Microsoft Endpoint Manager

Windows Autopilot

Security/compliance

Education

Bachelor's degree in IT or related field

Tools

Microsoft Intune

MECM / Configuration Manager

Windows Autopilot

JAMF

Entra ID / Azure AD

Job description

Applied Medical is a new generation medical device company with a proven business model and commitment to innovation fueled by rapid business growth and expansion. Our company has been developing and manufacturing advanced surgical technologies for over 35 years and has earned a strong reputation for excellence in the healthcare field. Our unique business model, combined with our dedication to delivering the highest quality products, enables team members to contribute in a larger capacity than is possible in typical positions.

Position Description

The Endpoint Engineer III manages and secures Applied Medical's enterprise endpoint environment. This position, also known as an endpoint management engineer or IT endpoint engineer, administers device management platforms including Microsoft Intune, Microsoft Configuration Manager, and Windows Autopilot to support a secure, reliable, and modern workplace. The Endpoint Engineer III combines troubleshooting expertise, PowerShell scripting proficiency, and endpoint security knowledge to keep Applied Medical's device fleet compliant, current, and running smoothly.

Key Responsibilities

• Manages enterprise endpoints using Microsoft Intune, Microsoft Configuration Manager (MECM), formerly known as SCCM, Windows Autopilot, and JAMF.
• Diagnoses and resolves complex device, operating system, application, and deployment issues.
• Develops PowerShell scripts and automation to streamline endpoint management, reporting, and operational processes.
• Enforces endpoint security best practices, including device compliance, vulnerability remediation, patch management, Conditional Access, and Zero Trust principles.
• Supports Windows, macOS, iOS, and Android devices across a modern workplace environment.
• Plans, manages, and executes endpoint related projects, including operating system upgrades, device refreshes, migrations, and cloud transformation initiatives.
• Partners with technical and non-technical stakeholders to communicate project status and resolve issues.
• Leverages endpoint analytics and reporting to improve device health, performance, and compliance.

Success in This Role Looks Like

• Maintains high device compliance and a strong security posture across the enterprise endpoint environment.
• Resolves technical issues quickly and reduces device downtime.
• Builds trusted partnerships with technical and non-technical stakeholders across the organization.
• Leads cross-functional projects, including operating system upgrades and cloud transformation initiatives, from planning through completion.
• Improves device health and performance using data-driven insights from endpoint analytics.
• Adapts quickly to new technologies and evolving cybersecurity requirements.

Position Requirements

This Position Requires the Following Skills and Attributes

• Administers Microsoft Intune, Microsoft Endpoint Manager, and Windows Autopilot in production environments.
• Applies working knowledge of Microsoft 365, Entra ID (Azure AD), and modern identity and device management solutions.
• Writes PowerShell scripts for administration, automation, and systems integration.
• Implements enterprise endpoint security and compliance controls in regulated or security conscious environments.
• Supports cloud based workplace technologies and modern management practices.
• Applies knowledge of operating system deployment, software distribution, patching frameworks, and endpoint lifecycle management methodologies.
• Manages multiple priorities while maintaining high standards of accuracy, quality, and customer satisfaction.
• Successful completion of a Background Check.

Preferred

The Following Skills and Attributes Are Preferred

• Holds a bachelor's degree in information technology, computer science, engineering, or a related field, or an equivalent combination of education and five or more years of experience.
• Holds relevant Microsoft certifications, such as MD-102, MS-102, AZ-104, or SC-300.
• Collaborates with global teams supporting geographically distributed endpoint environments.
• Participates in enterprise scale digital transformation or endpoint modernization initiatives.
• Applies knowledge of regulatory compliance frameworks and security standards applicable to endpoint management.

Benefits

• Competitive compensation range: $71000 - $95000 / year (California).
• Comprehensive benefits package.
• Training and mentorship opportunities.
• On-campus wellness activities.
• Education reimbursement program.
• 401(k) program with discretionary employer match.
• Generous vacation accrual and paid holiday schedule.

Please note that the compensation range may be adjusted in the future, and bonus and incentive compensation plans may apply.

Our total reward package reflects our commitment to team member growth and well-being, as we invest in your development and offer a range of benefits designed to enhance your career and life.

All compensation and benefits are subject to plan documents and written agreements.

Equal Opportunity Employer

Applied Medical is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (including pregnancy, childbirth, breastfeeding and related medical conditions), or sexual orientation, or any other status protected by federal, state or local laws in the locations where Applied Medical operates.