Endpoint Engineer MDM

Ipro Networks Pte. Ltd.; Palo Alto (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

IntelliPro is seeking an on-site Endpoint Engineer to design, implement, and manage a global device ecosystem from Palo Alto. You will own Apple and Windows management, plus cloud desktop infrastructure, with a focus on zero-touch provisioning and secure endpoints.

The role emphasizes daily operations, scripting, and automation across JAMF Pro, Intune, and AWS Workspaces, in a contractor capacity.

Qualifications

• 3–5 years in an Endpoint Engineering or MDM-focused role.
• Experience managing macOS and iOS at scale with JAMF Pro.
• Experience managing Windows environments via Microsoft Endpoint Manager.
• Hands-on AWS Workspaces administration.
• BYOD program deployment for iOS/Android.

Responsibilities

• Perform daily operations, patch management, and maintenance for endpoints.
• Lead JAMF Pro and Intune administration for policy and security baselines.
• Deliver zero-touch deployment via ABM and Windows Autopilot.
• Develop and maintain PowerShell and Bash scripts to automate tasks.
• Secure endpoints with encryption and EDR health; support security remediation.

Skills

Jamf Pro

Microsoft Intune

Amazon Workspaces

BYOD deployment

PowerShell

Bash

Okta/Azure AD

Education

Bachelor's degree

Relevant certifications (JAMF 200/300, MD-102, AWS Practitioner)

Tools

JAMF Pro

Microsoft Endpoint Manager

AWS Workspaces

Apple Business Manager

Autopilot

Job description

• This is an onsite contract role. The Endpoint Engineer is responsible for the design, implementation, and ongoing management of the organization's device ecosystem.
• This role focuses on automating the lifecycle of hardware and virtual desktops to ensure a seamless, secure, and "zero-touch" experience for our global workforce.
• You will serve as the subject matter expert for Apple and Windows management and our cloud desktop infrastructure.

Technical Environment:

• Windows & Android: Microsoft Intune / Endpoint Manager
• Virtual Desktop: Amazon Workspaces (AWS)
• Scripting: PowerShell, Bash, Python

Key Responsibilities:

• Daily Operations: Perform daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.
• Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.
• Apple Fleet: Architect and maintain the JAMF Pro environment for all macOS and iOS devices. Manage configuration profiles, policies, and patch management.
• Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.
• Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.
• Virtual Desktop Infrastructure (VDI)
• Administer and optimize Amazon Workspaces.
• Manage Workspaces directories, custom bundles, and image creation/maintenance.
• Troubleshoot connectivity and performance issues within the AWS ecosystem.
• Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs.
• Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment.
• Implement automated reporting for hardware inventory, license compliance, and security auditing.
• Security & Compliance
• Enforce endpoint security standards, including File Vault/BitLocker encryption and EDR agent health.
• Partner with Security teams to remediate vulnerabilities across the endpoint fleet.

Required Qualifications:

• Experience: Minimum 3–5 years in an Endpoint Engineering or MDM-focused role.
• Jamf Mastery: Proven experience managing both macOS and iOS at scale via JAMF Pro.
• Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.
• VDI Expertise: Hands-on experience with Amazon Workspaces administration.
• BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).
• Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.
• Identity: Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO.

Education & Certifications

• Bachelor's degree in computer science, IT, or equivalent professional experience.
• Relevant certifications (e.g., JAMF 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner) are a plus.

About Us:

Founded in 2009, IntelliPro is a global leader in talent acquisition and HR solutions. Our commitment to delivering unparalleled service to clients, fostering employee growth, and building enduring partnerships sets us apart. We continue leading global talent solutions with a dynamic presence in over 160 countries, including the USA, China, Canada, Singapore, Japan, Philippines, UK, India, Netherlands, and the EU.

IntelliPro, a global leader connecting individuals with rewarding employment opportunities, is dedicated to understanding your career aspirations. As an Equal Opportunity Employer, IntelliPro values diversity and does not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, disability, or any other legally protected group status. Moreover, our Inclusivity Commitment emphasizes embracing candidates of all abilities and ensures that our hiring and interview processes accommodate the needs of all applicants. Learn more about our commitment to diversity and inclusivity at https://intelliprogroup.com.

Compensation:

Compensation: The pay offered to a successful candidate will be determined by various factors, including education, work experience, location, job responsibilities, certifications, and more. Additionally, IntelliPro provides a comprehensive benefits package, all subject to eligibility.