Endpoint Systems Engineer

System One; Florida; Hybrid; USD 110,000 - 120,000; Part time

Benefits offered by this job

Health benefits

401(k) plan

Job summary

System One is seeking an Endpoint Systems Engineer in Miramar, FL to design, deploy, and secure enterprise workstation and mobile endpoints using Tanium and Microsoft Intune. Hybrid on-site and remote work arrangement.

Responsibilities include patch orchestration, OS lifecycle management, app packaging, policy administration, and CIS-aligned baselines. 4–6 years of experience with endpoint tooling and scripting is required.

Qualifications

• Requires 4–6 years in enterprise endpoint engineering with Tanium and Intune.
• Strong knowledge of GPO, Intune policies, and third-party patching.
• Proficiency in scripting (PowerShell, Python, Bash).
• Experience with Tier 3 endpoint/deployment troubleshooting.

Responsibilities

• Design, implement, maintain, and secure enterprise workstation and mobile endpoints (Windows, macOS, iOS).
• Administer Tanium as the primary management/patching platform.
• Develop and execute patching strategies for Windows/macOS and apps.
• Coordinate testing, pilot rings, deployments, validation, and rollback.
• Package, test, and deploy apps via Tanium Deploy and Intune.
• Manage Autopilot/Apple enrollment and zero-touch provisioning.
• Own GPO/Intune policy lifecycle and security baselines.
• Design/test/deploy policies per CIS standards and business needs.
• Develop automation scripts for provisioning, deployment, patching, health checks, reporting.
• Oversee endpoint provisioning, upgrades, decommissioning, asset reconciliation.
• Collaborate with cybersecurity to prioritize remediation of vulnerabilities.

Skills

Tanium

Microsoft Intune

GPO

Scripting

PowerShell

Python

Bash

End-user patching

Endpoint security

Education

4-year degree in Information Systems/CS/Engineering

Tools

Tanium Deploy

Intune

SCCM/MECM

Kaseya VSA

Job description

Job Title: Endpoint Systems Engineer
Location: Miramar, FL
Type: Contract To Hire
Compensation: $110,000.00 - $120,000.00
Work Model: Hybrid - onsite and remote

Overview

As an Endpoint Systems Engineer, you will be responsible for designing, implementing, maintaining, and securing the enterprise workstation and mobile endpoint estate, including Windows, macOS, and iOS devices managed through Microsoft Intune. This role owns operating system and third-party application patching, OS lifecycle management, software packaging and deployment, Group Policy (GPO) and Intune policy administration, configuration baselines, and endpoint security tooling across on-premises, cloud-managed, and remote endpoints in a regulated financial services environment.

Responsibilities

• Design, implement, maintain, and secure enterprise workstation and mobile endpoint environments, including Windows, macOS, and iOS devices managed through Microsoft Intune.
• Administer, maintain, and optimize Tanium as the primary endpoint management and patching platform, including module configuration, sensor/package authoring, content distribution, and operational reporting.
• Develop and execute enterprise patching strategies for Windows and macOS OS and third-party applications, including Patch Tuesday cycles, out-of-band releases, and zero-day remediation.
• Coordinate patch testing, pilot rings, phased deployments, validation, and rollback procedures across on-site and remote/VPN workstations.
• Package, test, and deploy enterprise applications for Windows, macOS, and iOS using Tanium Deploy and Microsoft Intune, maintaining a curated software catalog.
• Manage endpoint provisioning and enrollment workflows for Windows Autopilot, macOS Automated Device Enrollment, and iOS ADE, including driver libraries and zero-touch provisioning.
• Own the lifecycle management of Group Policy Objects and Microsoft Intune policies, including configuration profiles, compliance policies, security baselines, and endpoint protection policies.
• Design, test, deploy, troubleshoot, and tune policies in line with CIS-based standards and business needs.
• Develop automation scripts for provisioning, deployment, patch orchestration, health checks, and reporting using PowerShell, Python, Bash, and Tanium sensors/packages.
• Oversee workstation lifecycle activities such as provisioning, upgrades, decommissioning, and asset reconciliation.
• Partner with cybersecurity to analyze vulnerability scans and prioritize remediation efforts.
• Provide Tier 3 support for complex endpoint and software deployment issues, conducting root cause analysis and implementing solutions.
• Participate in platform upgrades and migrations, including system rollouts and major OS version transitions.
• Maintain technical documentation, runbooks, standards, procedures, and change records.
• Collaborate with cross-functional teams to ensure secure, resilient, and high-performing endpoint services.

Requirements

• 4 to 6 years of enterprise endpoint engineering experience, including administrator experience with Tanium and Microsoft Intune.
• Strong knowledge of Group Policy (GPO), Intune policy administration, and third-party application patching.
• Experience with scripting languages such as PowerShell, Python, and Bash.
• Experience troubleshooting Tier 3 support issues related to endpoints and deployment.
• Experience with SCCM/MECM, Kaseya VSA, or similar platforms is a plus.
• A 4-year degree in Information Systems, Computer Science, Computer Engineering, or a related field is preferred.
• Equivalent certifications or experience will be considered.
• Experience working in regulated industries such as financial services, healthcare, or government is strongly preferred.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America.

We help clients get work done more efficiently and economically, without compromising quality.

• System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-1
#LI-RN1
Ref: #431-IT Tampa