Endpoint Engineer III - Full-Time 1st Shift

North Shore Healthcare; Glendale (WI); On-site; USD 113,000 - 138,000; Full time

Benefits offered by this job

Growth Potential

Supportive Team

Be part of a team committed to quality

Job summary

North Shore Health is seeking an Endpoint Engineer III to design, secure, and standardize the organization’s endpoint environment across a multi-site healthcare system. You will lead device management initiatives with Intune, Entra ID, Autopilot, and Defender for Endpoint in a cloud-first Zero Trust setup.

The role focuses on transitioning from outsourced IT to an internal model, ensuring compliant, access-controlled endpoints, and providing advanced support across Infrastructure and Security

Qualifications

• Bachelor's degree in information technology, computer science, or related field.
• 5-8 years of endpoint engineering, endpoint management, or related IT disciplines.
• Hands-on with Microsoft Intune, Windows Autopilot, Defender for Endpoint, Entra ID, Conditional Access, and Zero Trust.
• Experience implementing endpoint security controls, device hardening, and compliance frameworks.
• Strong PowerShell scripting and automation experience.

Responsibilities

• Design, implement, and support endpoint configurations and policies using Microsoft Intune.
• Develop and enforce device compliance policies and Conditional Access integrations for Zero Trust.
• Implement, maintain, and optimize endpoint protection with Defender for Endpoint.
• Standardize endpoint provisioning with Windows Autopilot and modern device management methods.
• Create automation to improve consistency and reduce manual effort using PowerShell.

Skills

Microsoft Intune

Windows Autopilot

Defender for Endpoint

Microsoft Entra ID

Conditional Access

Zero Trust

PowerShell

Automation

Enterprise IT management

Education

Bachelor's degree in information technology or computer science

Tools

Power BI

Azure Logic Apps

Job description

Endpoint Engineer III

As a North Shore Health community, our Support Center supports and strengthens our centers as trusted providers of skilled nursing and rehabilitation services. Together, we are part of the Upper Midwest's largest post-acute care network, with 64 communities across Wisconsin, united by a shared commitment to clinical excellence, compassionate care, and serving our local communities.

What We Offer You:

• Up to $125k based on experience
• Supportive Team
• Growth Potential
• Be part of a team committed to clinical excellence and exceptional resident-centered care.

North Shore Health is committed to advancing clinical excellence by delivering exceptional, resident-centered care across every community we serve. Guided by our core values of Trust, Engagement, Competence, Respect, and Passion, we empower our teams to provide outstanding care while continuously improving outcomes for those we serve.

Summary/Objective

Under the supervision of the Sr. Director - IT & Security, the Endpoint Engineer III is responsible for building, standardizing, and securing the organization's endpoint environment across a multi-site healthcare system. This role combines hands-on engineering with platform ownership, with a strong focus on modern device management, Zero Trust principles, and endpoint security.

This position plays a key role in transitioning from outsourced IT services to an internal operating model by designing and implementing scalable, cloud-native endpoint standards utilizing Microsoft technologies including Intune, Entra ID, Autopilot, and Defender. The organization is adopting a cloud-first, Zero Trust approach to endpoint management, emphasizing device compliance, identity-driven access, and modern provisioning methods.

The ideal candidate will design endpoint controls that ensure only compliant, secure devices can access organizational resources. This position will require full-time onsite presence in our Glendale, WI office.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Design, implement, and support endpoint configurations, compliance policies, and lifecycle management processes using Microsoft Intune.
• Develop and enforce device compliance policies and Conditional Access integrations to support Zero Trust security principles.
• Implement, maintain, and optimize endpoint protection and security controls utilizing Microsoft Defender for Endpoint.
• Standardize endpoint provisioning and deployment processes using Windows Autopilot and modern device management methodologies.
• Identify, evaluate, and modernize legacy endpoint management configurations, including migration from traditional Group Policy-based administration.
• Develop automation and remediation solutions using PowerShell and other scripting technologies to improve consistency, reduce manual effort, and increase operational efficiency.
• Design and maintain endpoint standards, governance controls, and device management practices that support organizational security and compliance requirements.
• Support the transition from managed service provider (MSP) support models to internal endpoint management operations.
• Provide advanced technical support and escalation assistance to Help Desk and Infrastructure teams for complex endpoint-related issues.
• Collaborate with Infrastructure, Security, and Operations teams to ensure endpoint solutions align with organizational architecture, security, and compliance standards.
• Maintain documentation, standards, and operational procedures related to endpoint management and security.
• Stay current with emerging endpoint management, security, and Zero Trust technologies and contribute to evolving the best internal practices.

Resident Rights

• Knows Resident Rights
• Help the residents/patients exercise and/or protect their rights
• Reports resident/patient complaints to management
• Maintains confidentiality of resident/patient information

HIPAA

• Follows and adheres to Facility's policies and procedures implementing HIPAA requirements for the privacy and security of protected health information
• Uses and/or discloses only minimum amount of Protected Health Information necessary to complete assigned tasks
• Reports all suspected of violation of company's HIPAA policies or procedures to Facility leadership

Work Environment & Physical Demands

The responsibilities of this position involve typical office related physical activities, including standing, walking, sitting, and lifting up to 10 pounds unassisted. This role may require occasional travel between organizational locations, handling of technology equipment, and participation in an on-call support rotation. While performing the duties of this job, the employee is regularly required to communicate effectively and hear.

Required Education and Experience

• Bachelor's degree in information technology, Computer Science, or a related field, or equivalent practical experience.
• 5-8 years of experience in endpoint engineering, endpoint management, systems administration, or related information technology disciplines.
• Extensive hands-on experience with:
  • Microsoft Intune (configuration, compliance, and device management)
  • Windows Autopilot and zero-touch provisioning technologies
  • Microsoft Defender for Endpoint, including endpoint detection and response (EDR), security baselines, and device risk management
  • Microsoft Entra ID and device identity management concepts
  • Conditional Access and Zero Trust security principles
• Experience implementing endpoint security controls, device hardening, and compliance frameworks.
• Strong PowerShell scripting and automation experience.
• Experience supporting enterprise or multi-site technology environments.
• Demonstrated ability to establish, standardize, and improve endpoint management processes within evolving organizations.
• Knowledge of endpoint governance, device lifecycle management, and modern cloud-based endpoint administration.

Preferred Education and Experience

• Experience with Power BI or operational reporting tools.
• Exposure to Azure services (Logic Apps, Functions).
• Familiarity with healthcare or other regulated environments.
• Demonstrated interest in automation, AI-assisted capabilities, and process improvement.

Other Duties

• Microsoft certifications related to Intune, Endpoint Management, Security, or Microsoft 365 technologies.
• Security certifications such as Security+ or equivalent.
• Experience transitioning organizations from Group Policy-based management to modern endpoint management platforms.
• Familiarity with Conditional Access and Zero Trust implementation models.
• Experience in healthcare or other regulated environments.
• Experience working within managed service provider (MSP) environments or supporting transitions from outsourced to internal IT operations.