Endpoint Systems Engineer II — Patch & Deploy (Tanium/Intune)

Space Coast Credit Union; Florida; On-site; USD 113,900 - 120,628; Full time

Benefits offered by this job

Health & Wellness

Financial Perks

Education Support

Generous Time Off

Job summary

Space Coast Credit Union is seeking a Systems Engineer II to design, implement, and secure our enterprise workstation and mobile endpoint estate across Windows, macOS, and iOS. You will manage patching, deployment, and policy administration using Tanium and Intune in a regulated financial services environment.

The role emphasizes automation, vulnerability remediation, and ongoing platform upgrades. A 5–8 year track record in enterprise endpoint engineering is preferred, with a 4-year degree in

Qualifications

• 5–8 years of enterprise endpoint engineering with Tanium and Intune.
• Experience with GPOs, policy deployment, and third-party patching.
• Strong scripting in PowerShell; Windows/macOS/iOS management.
• Experience with SCCM/MECM, and regulated industries preferred.
• Bachelor’s degree in Information Systems, CS, or Engineering or equivalent.

Responsibilities

• Administer Tanium as the primary endpoint management and patching platform.
• Design and implement enterprise patching for Windows/macOS and apps.
• Coordinate testing, rollout, and rollback across on-site and remote devices.
• Package and deploy apps for Windows/macOS/iOS using Tanium Deploy and Intune.
• Manage GPOs and Intune policies across Windows/macOS/iOS with CIS hardening.
• Create automation for provisioning, deployment, and reporting.
• Support vulnerability remediation with cybersecurity team.
• Provide Tier 3 escalation and root-cause analysis.
• Participate in platform upgrades and migrations.
• Maintain technical docs, runbooks, and change records.
• Collaborate with networks, identities, cloud teams for secure endpoints.

Skills

Tanium endpoint management

Microsoft Intune

GPO/Policy administration

Patching & packaging

SCCM/MECM

PowerShell/Python scripting

Education

Bachelor’s degree in Information Systems/CS/Engineering

Tools

SCCM/MECM

Kaseya VSA

Job description

At Space Coast Credit Union (SCCU), our members are at the heart of everything we do. Since 1951, we’ve been committed to delivering financial services founded on integrity and a people-first philosophy.

This position is a 6 month contract-to-hire.

As a Systems Engineer II, you will be responsible for designing, implementing, maintaining, and securing the enterprise workstation and mobile endpoint estate, including Windows, macOS, and iOS devices managed through Microsoft Intune. This role owns operating system and third-party application patching, OS lifecycle management, software packaging and deployment, Group Policy (GPO) and Intune policy administration, configuration baselines, and endpoint security tooling across on-premises, cloud-managed, and remote endpoints in a regulated financial services environment.

Why Join SCCU?

• Member-Focused Mission: Be part of a not-for-profit organization that reinvests in its members.
• Flexible Schedule Options
• Career Growth: We prioritize internal promotions and offer on-the-job training.
  
  
  

Systems Engineer II Key Responsibilities

• Administer, maintain, and optimize Tanium as the primary endpoint management and patching platform, including module configuration (Patch, Deploy, Comply, Asset, Interact), sensor/package authoring, content distribution, and operational reporting.
• Design, execute, and continuously improve enterprise patching strategies for Windows and macOS operating systems and third-party applications, including monthly Patch Tuesday cycles, out-of-band releases, zero-day remediation, and Windows feature update servicing.
• Coordinate patch testing, pilot rings, phased production deployment, validation, and rollback procedures across on-site and remote/VPN workstations; monitor patch compliance dashboards and remediate failures or non-reporting devices promptly.
• Package, test, and deploy enterprise applications for Windows (MSI, EXE, MSIX, Win32), macOS (PKG, DMG), and iOS (App Store and line-of-business apps) using Tanium Deploy and Microsoft Intune (with SCCM/MECM where applicable); maintain a curated software catalog and self-service application access.
• Manage endpoint provisioning and enrollment workflows for Windows (Autopilot), macOS (Automated Device Enrollment via Apple Business Manager / Intune), and iOS (ADE via ABM / Intune), including driver libraries, in-place feature upgrades, and zero-touch provisioning experiences.
• Own the full lifecycle of Group Policy Objects (GPOs) and Microsoft Intune policies for endpoints across Windows, macOS, and iOS. This includes configuration profiles, compliance policies, security baselines, endpoint protection policies, app configuration and protection policies, update rings, and conditional access. Design policies, test in pilot rings, deploy to production, troubleshoot, document, and continuously tune them to align with CIS-based hardening standards and business requirements.
• Develop and maintain automation for endpoint provisioning, software deployment, patch orchestration, health checks, and reporting using Tanium sensors/packages, PowerShell, Python, and Bash/shell scripting for macOS.
• Manage workstation lifecycle activities including provisioning, refresh, decommissioning, asset reconciliation, and timely retirement of unsupported operating systems and applications.
• Partner with the Cybersecurity team to analyze vulnerability scan results (e.g., Qualys, Tenable, Rapid7), prioritize remediation based on risk and exploitability, and track remediation to closure within defined SLAs.
• Provide Tier 3 escalation support for complex endpoint, software deployment, OSD, patch compliance, and client health issues; perform root cause analysis and drive permanent remediation.
• Participate in platform upgrades and migrations (e.g., Tanium module rollouts, Windows 10 to 11, macOS major version transitions, Intune co-management and cloud-native moves) while following established operational, risk, and change control processes.
• Create and maintain technical documentation, runbooks, standards, procedures, and change records to support operational consistency, audit readiness, and knowledge transfer to peers and the service desk.
• Collaborate with cybersecurity, network, identity, cloud, and application teams to support secure, resilient, and high-performing endpoint services; other duties as assigned.
  
  
  

Systems Engineer II Requirements

5 to 8 years of progressively responsible endpoint engineering experience in enterprise environments, including strong hands-on administration of Tanium for endpoint management and patching, Microsoft Intune for Windows/macOS/iOS, Group Policy (GPO) and Intune policy administration and deployment, third-party application patching, software packaging, scripting (PowerShell), and Tier 3 troubleshooting. Experience with SCCM/MECM, Kaseya VSA, or similar platforms is a plus.

A 4-year degree in Information Systems, Computer Science, Computer Engineering, or a related field is preferred. Equivalent combinations of education, certifications, and directly related enterprise endpoint engineering experience will also be considered. Experience in regulated industries such as financial services, healthcare, or government is strongly preferred.

Systems Engineer II Compensation

$113,900.00 - $120,628.00

SCCU Benefits

• Health & Wellness: Medical, dental, and vision insurance, plus an Employee Assistance Program.
• Financial Perks: 401(k) match (5%), HSA match, and SCCU-paid insurance (short/long-term disability, life insurance).
• Education Support: Tuition reimbursement after one year of service.
• Generous Time Off: 20+ days of PTO, birthday PTO, and 11 federal holidays.
• Exclusive Discounts: Lower rates on loans, credit cards, and no fee SCCU accounts!
  
  
  

Work Schedule

• Monday – Friday: 8:00 a.m. - 5:00 p.m.
• This role requires flexibility for after hours and weekend work, as needed, to perform changes and maintenance without impacting business operations.
  
  
  

About SCCU

Since 1951, Space Coast Credit Union (SCCU) has proudly served our community, growing to over 685,000 members and managing $9 billion in assets. With 67 branches spanning Florida’s east coast, we are the third-largest credit union in the state. In 2025, we expanded into Orange County to better serve the growing East Orlando market.

As a not-for-profit financial institution, SCCU is dedicated to putting our members first. Unlike traditional banks, we return profits to our members through better rates, lower fees, and enhanced services. While we offer the same financial products—like checking, savings, and loans—our focus remains on empowering our members and supporting their financial well-being. With local decision-making and a commitment to exceptional service, we strive to make a meaningful difference in the lives of those we serve.

At SCCU, we also prioritize our team members by fostering a supportive and collaborative environment that encourages career growth and development. As we continue to grow, we are seeking talented, member-focused professionals to join our team and help deliver innovative financial solutions and outstanding service.

I UNDERSTAND this application is a legal document for purposes of employment. Upon acceptance of an offer with SCCU, I understand that I will be required to complete background screening, employment and education verifications, and drug screening. If I am a member of Space Coast Credit Union, my SCCU membership accounts will be reviewed as part of the employment screening process to determine whether they are in good standing, as defined by SCCU policy. Failure to meet these standards may affect employment eligibility, including the possible withdrawal of a conditional offer of employment. I further understand that any misstatements or omissions in this application or during the pre-employment process may be considered falsification and could result in a decision not to hire me, or termination of employment if discovered after hire.

I UNDERSTAND that the information requested regarding date of birth, race, and sex is for the sole purpose of gathering the above information accurately and will not be used to discriminate against me in violation of any law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and complete the required employment eligibility verification documentation upon hire.

SCCU is a drug-free workplace. I understand that as a condition of employment, I will be required to submit to drug testing and any procedures necessary to assess my qualifications for employment. If hired, I further understand that my employment is for no definite period and may be terminated at any time without prior notice.