Endpoint Management Engineer

U.S. Department of Veterans Affairs; Oklahoma; On-site; USD 77,000 - 94,000; Full time

Benefits offered by this job

Vacation and sick leave including 15/

11 paid holidays annually

Comprehensive benefits package with a­

Job summary

U.S. Department of Veterans Affairs is seeking an Endpoint Management Engineer to design, implement, and operate enterprise endpoint solutions within Oklahoma Management and Enterprise Services.

You will focus on modern device management, automation, and secure, scalable endpoint operations across Windows, Apple, and Android platforms. This role requires advanced PowerShell scripting and deep experience with Microsoft Intune, Windows Autopilot, and ABM.

Qualifications

• Advanced PowerShell scripting and automation experience.
• Strong hands-on experience with Microsoft Intune (Endpoint Manager).
• Experience with Windows Autopilot deployment and lifecycle methodologies.
• Experience managing Windows, macOS, iOS, and Android devices in an enterprise environment.
• Experience with Apple Business Manager (ABM).
• Experience with application deployment and endpoint configuration management.

Responsibilities

• Manage and support enterprise endpoint environments using Microsoft Intune and related technologies.
• Configure and maintain Windows, macOS, iOS, and Android devices in a secure and compliant manner.
• Administer Apple Business Manager (ABM) for device enrollment, provisioning, and lifecycle management.
• Lead Windows Autopilot design, deployment, and lifecycle management strategies.
• Develop and enforce device configuration profiles, compliance policies, and security baselines.
• Manage application packaging, deployment, and lifecycle across all supported platforms.
• Support Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
• Ensure efficient delivery, version control, and performance of enterprise applications.
• Troubleshoot and resolve application deployment and compatibility issues.
• Develop and maintain advanced PowerShell scripts to automate provisioning, configuration, and reporting.
• Identify and implement automation opportunities to improve efficiency and reduce manual processes.
• Manage endpoint patching and updates using Intune, Tanium, or similar tools.
• Ensure compliance with security standards and timely remediation of vulnerabilities.
• Partner with security teams to enforce endpoint protection and compliance policies.
• Provide advanced technical support and serve as an escalation point for endpoint and device management issues.
• Collaborate with cross-functional teams on infrastructure and endpoint initiatives.
• Contribute to documentation, standards, and continuous improvement efforts.

Skills

Advanced PowerShell scripting

Microsoft Intune / Endpoint Manager

Windows Autopilot

Apple Business Manager (ABM)

Enterprise device management

Troubleshooting

Education

Bachelor's degree + 5+ years

Associate's degree + 7+ years

High School Diploma + 9+ years

Tools

Intune (Endpoint Manager)

Tanium

Azure Entra ID

Job description

Job Posting Title

Endpoint Management Engineer

Agency

090 OFFICE OF MANAGEMENT AND ENTERPRISE SERV

Supervisory Organization

IS-CS

Job Posting End Date

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

Estimated Appointment End Date (Continuous if Blank)

November 10, 2026

Full/Part-Time

Full time

Job Type

Regular

Job Description

As an Endpoint Management Engineer with OMES you will enjoy:

• Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.
• A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

Job Details

• Full-time 40-hour work weeks.
• Supports the Information Services Division.
• Salary is up to 85,000 based on education and experience.

Position Summary

The Endpoint Management Engineer is responsible for the design, implementation, and ongoing management of enterprise endpoint solutions within Oklahoma Management and Enterprise Services - Information Services (OMES IS). This role focuses on modern device management, automation, and secure, scalable endpoint operations across Windows, Apple, and Android platforms.

This position requires advanced PowerShell scripting skills and deep experience with Microsoft Intune, Windows Autopilot, and Apple Business Manager. The Endpoint Management Engineer works closely with IT teams and stakeholders to drive efficient device provisioning, application management, patching, and continuous improvement of endpoint services.

Position Responsibilities

Endpoint Management & Modern Workplace

• Manage and support enterprise endpoint environments using Microsoft Intune and related technologies.
• Configure and maintain Windows, macOS, iOS, and Android devices in a secure and compliant manner.
• Administer Apple Business Manager (ABM) for device enrollment, provisioning, and lifecycle management.
• Lead Windows Autopilot design, deployment, and lifecycle management strategies.
• Develop and enforce device configuration profiles, compliance policies, and security baselines.

Application & Lifecycle Management

• Manage application packaging, deployment, and lifecycle across all supported platforms.
• Support Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.
• Ensure efficient delivery, version control, and performance of enterprise applications.
• Troubleshoot and resolve application deployment and compatibility issues.

Automation & Scripting

• Develop and maintain advanced PowerShell scripts to automate provisioning, configuration, and reporting.
• Identify and implement automation opportunities to improve efficiency and reduce manual processes.

Patch Management & Security

• Manage endpoint patching and updates using Intune, Tanium, or similar tools.
• Ensure compliance with security standards and timely remediation of vulnerabilities.
• Partner with security teams to enforce endpoint protection and compliance policies.

Collaboration & Support

• Provide advanced technical support and serve as an escalation point for endpoint and device management issues.
• Collaborate with cross-functional teams on infrastructure and endpoint initiatives.
• Contribute to documentation, standards, and continuous improvement efforts.

Education and Experience

Minimum Qualifications (one of the following):

• Bachelor's degree and 5+ years of relevant experience, OR
• Associate's degree and 7+ years of relevant experience, OR
• High School Diploma or GED and 9+ years of relevant experience, OR
• Equivalent experience (one year of relevant experience for each year of required education).

Required Skills and Experience

• Advanced PowerShell scripting and automation experience.
• Strong hands-on experience with Microsoft Intune (Endpoint Manager).
• Experience with Windows Autopilot deployment and lifecycle methodologies.
• Experience managing Windows, macOS, iOS, and Android devices in an enterprise environment.
• Experience with Apple Business Manager (ABM).
• Experience with application deployment and endpoint configuration management.
• Strong troubleshooting and problem-solving skills in endpoint environments.

Preferred Skills and Experience

• Experience with patch management tools such as Tanium or similar platforms.
• Experience with Mobile Application Management (MAM) strategies.
• Familiarity with Azure AD (Entra ID) and identity management concepts.
• Knowledge of endpoint security and compliance best practices.
• Experience in large-scale or government IT environments.
• Relevant certifications (e.g., Microsoft Endpoint Manager, Azure, or similar).

Physical Demands and Work Environment

• Work is performed in a climate-controlled office environment with moderate noise levels.
• Requires extended periods of sitting, computer use, and phone co