Endpoint Engineering Manager: Windows & Security

Citizens Bank; Johnston (RI); Hybrid; USD 134,000 - 179,000; Full time

Job summary

Citizens Bank is seeking a Manager of Endpoint Engineering to lead a team responsible for Windows, Mac, and mobile device management. You will guide two pods—one for operational support and another for vulnerability management—connecting device management with security and colleague experience in a regulated banking environment.

The role emphasizes coaching, strategic direction, and collaboration with cybersecurity, risk, and DEX teams to ensure secure, reliable endpoint services and continuous

Qualifications

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.
• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.
• Hands‑on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.
• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk‑based prioritization.
• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.
• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.
• Strong communication, analytical, stakeholder management, and escalation leadership skills.
• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

Responsibilities

• Lead, coach, and develop a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.
• Oversee operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.
• Provide leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.
• Guide endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.
• Partner with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.
• Establish clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.
• Use endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.
• Lead resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.
• Support endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.
• Promote an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

Skills

Endpoint engineering

Team leadership

Intune

Configuration Manager

Patch management

Security practices

Cross-functional collaboration

Regulatory/compliance

Communication

Tools

Intune

Configuration Manager

Jamf

Nexthink

Job description

Citizens Bank is seeking a Manager of Endpoint Engineering to lead a team responsible for Windows, Mac, and mobile device management. You will guide two pods—one for operational support and another for vulnerability management—connecting device management with security and colleague experience in a regulated banking environment.

The role emphasizes coaching, strategic direction, and collaboration with cybersecurity, risk, and DEX teams to ensure secure, reliable endpoint services and continuous