Endpoint Engineer: SCCM & Intune Ops

Connectly Recruiting; United States; On-site; USD 85,000 - 120,000; Full time

Job summary

Connectly Recruiting is assisting a client in recruiting a Tier 2 Endpoint Engineer to support day‑to‑day operations of endpoint management platforms, including MECM/SCCM and Microsoft Intune, across Windows, macOS, iOS, and Android in multiple client environments.

The engineer ensures patch compliance, client health, policy integrity, and acts as escalation point for issues beyond Tier 1, while following established change processes and maintaining thorough as‑built documentation.

Qualifications

• 3–5 years of hands-on experience administering Microsoft Configuration Manager (SCCM/MECM) in a production environment.
• Experience with Intune enrollment, compliance policies, configuration profiles, and app management across devices.
• Knowledge of Conditional Access, MFA, and device compliance interactions.
• Experience with certificate-based authentication (SCEP/PKCS) and VPN profile configuration.
• Ability to diagnose endpoint issues through log analysis and structured troubleshooting.
• Experience delivering support in a managed services or multi-client environment with SLA adherence.
• Clear written communication for client-facing documentation and remediation recommendations.
• Sound judgment distinguishing routine operational work from scoped professional services.
• Microsoft MD-102 or equivalent demonstrated experience preferred.

Responsibilities

• Maintain Configuration Manager collections, applications, packages, and task sequences, including OS deployment and driver management.
• Maintain Intune device compliance policies, configuration profiles, and security baselines across Windows, iOS, Android, and macOS.
• Administer application deployment and lifecycle activities, including app protection policies and Company Portal availability.
• Maintain certificate profiles (SCEP/PKCS) and VPN configurations, and monitor certificate health, expiration, and renewal.
• Monitor Conditional Access and multifactor authentication compliance, and investigate policy enforcement and configuration drift issues.
• Support Microsoft Defender for Endpoint integration and perform security response activities including selective device wipe.
• Resolve assigned tickets within SLA, expedite appropriately, and follow change management procedures when working in client environments.
• Produce and maintain as-built documentation and standard operating procedures for supported environments.
• Contribute technical findings to quarterly client reviews covering compliance posture, policy effectiveness, and operational trends.
• Identify configuration gaps, operational risks, and surface recommendations for optimization or remediation.

Skills

Log analysis

Structured troubleshooting

Ticket queue discipline

Written communication

Education

MD-102 Endpoint Administrator (or equivalent)

Tools

Microsoft Configuration Manager (SCCM/MECM)

Microsoft Intune

SCEP/PKCS

VPN configurations

Conditional Access

Defender for Endpoint

Job description

Connectly Recruiting is assisting a client in recruiting a Tier 2 Endpoint Engineer to support day‑to‑day operations of endpoint management platforms, including MECM/SCCM and Microsoft Intune, across Windows, macOS, iOS, and Android in multiple client environments.

The engineer ensures patch compliance, client health, policy integrity, and acts as escalation point for issues beyond Tier 1, while following established change processes and maintaining thorough as‑built documentation.