Endpoint Engineering Lead — Intune, Autopilot & Automation

Trilon Group; East Brunswick Township (NJ); On-site; USD 130,000 - 180,000; Full time

Job summary

Jobtailor seeks an experienced leader to drive enterprise endpoint management strategy and execution. You will own architecture and standards for Microsoft Intune, Windows Autopilot, and Entra ID device management across a distributed enterprise landscape.

You will collaborate with security, identity, and IT operations to ensure reliable deployment, patch governance, and asset lifecycle. Strong hands-on skills and cross-team leadership are essential.

Qualifications

• 7+ years of endpoint management, systems engineering, or modern workplace experience with Intune and Windows Autopilot in a distributed enterprise.
• Ability to influence technical peers, establish standards, coordinate across teams, and communicate clearly without formal reporting authority.
• Expert-level hands-on experience with Intelune Intune, Windows Autopilot, Entra ID device management, Windows 11, and endpoint policy architecture.
• Strong experience with enterprise software packaging and delivery including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations; PSADT experience preferred.
• Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation; Patch My PC experience preferred.
• Advanced PowerShell skills and practical experience using Microsoft Graph or other APIs for automation, reporting, and operational controls.
• Strong understanding of Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation.
• Experience supporting complex distributed environments and mergers/acquisitions or tenant/domain transitions.
• Ability to reconcile data across device-management, identity, asset, remote-support, and service-management systems; experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement.
• Strong hands-on experience managing Mac, iPhone, and iPad through Intune and Apple Business Manager.
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred.
• Experience governing an enterprise copier, printer, or plotter fleet is preferred.
• Experience with endpoint equipment warehousing and depot operations is preferred.
• Experience packaging and deploying Autodesk AutoCAD and Bentley products is preferred.

Responsibilities

• Provide hands-on technical leadership, architecture, design review, and practical guidance without formal reporting responsibility.
• Establish platform priorities, service ownership, technical standards, cross-training, escalation coverage, and an executable roadmap.
• Own endpoint engineering documentation, change control, testing and rollback standards, support handoffs, knowledge transfer, and cross-training.
• Develop dashboards and reports for enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation performance.
• Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security policies, and vulnerability remediation.
• Lead endpoint discovery, assessment, planning, and migration for newly acquired firms.

Skills

Endpoint Management

PowerShell

Microsoft Intune

Windows Autopilot

Microsoft Graph

Tools

Defender for Endpoint

BitLocker

Apple Business Manager

Patch My PC

Job description

Jobtailor seeks an experienced leader to drive enterprise endpoint management strategy and execution. You will own architecture and standards for Microsoft Intune, Windows Autopilot, and Entra ID device management across a distributed enterprise landscape.

You will collaborate with security, identity, and IT operations to ensure reliable deployment, patch governance, and asset lifecycle. Strong hands-on skills and cross-team leadership are essential.