Endpoint Systems Engineer

System One; Palm Shores (FL); Hybrid; USD 110,000 - 120,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Equal opportunity employer

Job summary

System One is seeking an Endpoint Systems Engineer in Melbourne, FL to design, implement, and secure the enterprise workstation and mobile endpoint estate across Windows, macOS, and iOS devices managed through Intune. The role includes patching, OS lifecycle management, GPO and Intune policy administration, and endpoint security tooling in a regulated financial services environment.

You will administer Tanium, coordinate patch testing and deployments, deploy applications, and collaborate with

Qualifications

• 4 to 6 years of enterprise endpoint engineering experience including Tanium and Intune.
• Strong knowledge of GPO, Intune policy administration, and third-party patching.
• Scripting experience with PowerShell, Python, and Bash.
• Experience with Tier 3 endpoint and deployment troubleshooting.
• Experience with regulated industries preferred.

Responsibilities

• Design, implement, maintain, and secure enterprise endpoint environments across Windows, macOS, and iOS.
• Administer Tanium as the primary endpoint management and patching platform.
• Develop and execute patching strategies for Windows and macOS.
• Coordinate testing, pilots, and phased deployments across on-site and remote workstations.
• Package, test, and deploy enterprise apps using Tanium Deploy and Intune.
• Own lifecycle management of Group Policy Objects and Intune policies.
• Develop automation scripts (PowerShell, Python, Bash) for provisioning and health checks.

Skills

Endpoint engineering

PowerShell

Python

Bash

Group Policy

Intune policy administration

OS patching

Education

Bachelor's degree in Information Systems / Computer Science / Computer Engineering or related field

Tools

Tanium

Microsoft Intune

SCCM/MECM

Kaseya VSA

Job description

Job Title: Endpoint Systems Engineer
Location: Melbourne, FL
Type: Contract To Hire
Compensation: $110,000.00 - $120,000.00
Work Model: Hybrid – onsite and remote
Overview
As an Endpoint Systems Engineer, you will be responsible for designing, implementing, maintaining, and securing the enterprise workstation and mobile endpoint estate, including Windows, macOS, and iOS devices managed through Microsoft Intune. This role owns operating system and third-party application patching, OS lifecycle management, software packaging and deployment, Group Policy (GPO) and Intune policy administration, configuration baselines, and endpoint security tooling across on-premises, cloud-managed, and remote endpoints in a regulated financial services environment.

Responsibilities

• Design, implement, maintain, and secure enterprise workstation and mobile endpoint environments, including Windows, macOS, and iOS devices managed through Microsoft Intune.
• Administer, maintain, and optimize Tanium as the primary endpoint management and patching platform, including module configuration, sensor/package authoring, content distribution, and operational reporting.
• Develop and execute enterprise patching strategies for Windows and macOS OS and third-party applications, including Patch Tuesday cycles, out-of-band releases, and zero-day remediation.
• Coordinate patch testing, pilot rings, phased deployments, validation, and rollback procedures across on-site and remote/VPN workstations.
• Package, test, and deploy enterprise applications for Windows, macOS, and iOS using Tanium Deploy and Microsoft Intune, maintaining a curated software catalog.
• Manage endpoint provisioning and enrollment workflows for Windows Autopilot, macOS Automated Device Enrollment, and iOS ADE, including driver libraries and zero-touch provisioning.
• Own the lifecycle management of Group Policy Objects and Microsoft Intune policies, including configuration profiles, compliance policies, security baselines, and endpoint protection policies.
• Design, test, deploy, troubleshoot, and tune policies in line with CIS-based standards and business needs.
• Develop automation scripts for provisioning, deployment, patch orchestration, health checks, and reporting using PowerShell, Python, Bash, and Tanium sensors/packages.
• Oversee workstation lifecycle activities such as provisioning, upgrades, decommissioning, and asset reconciliation.
• Partner with cybersecurity to analyze vulnerability scans and prioritize remediation efforts.
• Provide Tier 3 support for complex endpoint and software deployment issues, conducting root cause analysis and implementing solutions.
• Participate in platform upgrades and migrations, including system rollouts and major OS version transitions.
• Maintain technical documentation, runbooks, standards, procedures, and change records.
• Collaborate with cross-functional teams to ensure secure, resilient, and high-performing endpoint services.

Requirements

• 4 to 6 years of enterprise endpoint engineering experience, including administrator experience with Tanium and Microsoft Intune.
• Strong knowledge of Group Policy (GPO), Intune policy administration, and third-party application patching.
• Experience with scripting languages such as PowerShell, Python, and Bash.
• Experience troubleshooting Tier 3 support issues related to endpoints and deployment.
• Experience with SCCM/MECM, Kaseya VSA, or similar platforms is a plus.
• A 4-year degree in Information Systems, Computer Science, Computer Engineering, or a related field is preferred.
• Equivalent certifications or experience will be considered.
• Experience working in regulated industries such as financial services, healthcare, or government is strongly preferred.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.