Enterprise Endpoint Engineer

Addison Group; Dallas (TX); On-site; USD 144,000 - 176,000; Full time

Benefits offered by this job

Health benefits

401(k) with match

Tuition Reimbursement

27 days PTO

Job summary

Addison Group is seeking an Enterprise Endpoint Engineer in Dallas, TX to lead the enterprise-wide architecture, strategy, and governance of all endpoint computing platforms, including desktops, laptops, mobile devices, VDI, and endpoint management systems.

You will shape the future-state architecture, set standards, and align with security, cloud, identity, and enterprise platform strategies, collaborating with Desktop Engineering, Mobility, VDI, Identity, Security, and Cloud teams.

Qualifications

• 10+ years in Endpoint / EUC / Desktop / Mobility / VDI engineering.
• 5+ years in architecture or senior engineering role.
• Expert knowledge of Intune, MECM, Autopilot, Entra ID, AD and cloud identity.

Responsibilities

• Define enterprise endpoint architecture across all business units.
• Develop multi-year roadmap for digital workplace platforms.
• Establish standards for device management, configuration, and security.
• Align endpoint strategy with enterprise cloud, identity, and security architecture.
• Participate in Enterprise Architecture Review Board (ARB).

Skills

Automation / scripting

Enterprise-scale solutions design

Cloud/identity alignment

Education

Bachelor's degree or equivalent work experience

Tools

Intune

MECM / ConfigMgr

Autopilot

Entra ID

Active Directory

Windows/macOS/iOS/Android

Azure Virtual Desktop

Citrix

VMware Horizon

Job description

• Develop multi-year roadmap for digital workplace platforms
• Support SaaS / web-first workspace models
• Define hardening baselines

Title: Enterprise Endpoint Engineer

Location: Dallas, TX - Onsite 1 day a week

Salary: $160k

This position is not eligible for sponsorhip

Benefits:

• Immediate eligibility for health and welfare benefits
• 401(k) savings plan with dollar-for-dollar match up to 5%
• Tuition Reimbursement
• 27 days of untracked PTO per year

Summary

Enterprise Endpoint Engineer is responsible for the enterprise-wide architecture, strategy, and technical governance of all endpoint computing platforms including desktops, laptops, mobile devices, virtual desktops, and endpoint management systems.

This role defines the future-state architecture, standards, and roadmap for the organization’s digital workplace and ensures alignment with security, cloud, identity, and enterprise platform strategies.

The Enterprise Endpoint Engineer serves as the highest-level technical authority for endpoint technologies and provides architectural leadership across Desktop Engineering, Mobility, VDI, Identity, Security, and Cloud teams.

Key Responsibilities

Enterprise Architecture & Strategy

• Define enterprise endpoint architecture across all business units
• Develop multi-year roadmap for digital workplace platforms
• Establish standards for device management, configuration, and security
• Align endpoint strategy with enterprise cloud, identity, and security architecture
• Participate in Enterprise Architecture Review Board (ARB)

Endpoint Platform Architecture

Design and govern architecture for:

• Microsoft Intune / Endpoint Manager
• MECM / SCCM (if hybrid)
• Entra ID / Active Directory
• Windows / macOS / iOS / Android
• Autopilot / Zero-Touch provisioning
• Device compliance / conditional access
• Patch & lifecycle management
• Endpoint encryption & security baselines

Virtual Workspace & Remote Access Architecture (awareness)

• Architect enterprise VDI / DaaS platforms
• Design Citrix / VMware / Azure Virtual Desktop solutions
• Define remote access architecture
• Support hybrid and cloud workspace models
• Ensure scalability, performance, and resiliency

Cloud & Modern Workplace Architecture (awareness)

• Design endpoint integration with Microsoft 365 / Azure
• Define cloud-first endpoint management strategy
• Support modern authentication & Zero Trust
• Enable device-based access controls
• Support SaaS / web-first workspace models

Security & Zero Trust Architecture (partner with Security)

• Define endpoint security architecture
• Aligning with Cybersecurity & Risk teams
• Support Zero Trust initiatives
• Define hardening baselines
• Support vulnerability management strategy
• Ensure compliance with regulatory standards

Examples

• HIPAA
• PCI
• SOC
• NIST
• CIS benchmarks

Identity & Access Integration

• Align endpoint architecture with identity strategy
• Integrate with Entra ID / AD / MFA / Conditional Access
• Support device trust models
• Support SSO and modern auth

Automation & Engineering Standards

• Define automation strategy for endpoint management
• Promote PowerShell / Graph / API / IaC frameworks
• Enable self-service / zero-touch deployments
• Support AI-driven endpoint analytics

Monitoring & Digital Experience

• Define endpoint monitoring architecture
• Support tools such as:
• Nexthink
• ControlUp
• Endpoint Analytics
• Intune reporting
• Improve user experience metrics

Vendor & Technology Evaluation

• Lead technology selection for endpoint platforms
• Conduct architecture reviews & POCs – 3 - Hardware, Mobile,
• Define technical requirements for RFPs
• Partner with vendors and integrators

Governance & Standards

• Define Endpoint Engineering Standards
• Approve technical designs
• Enforce architecture compliance
• Provide technical oversight for major projects

Cross-Team Leadership

Partner with:

• Enterprise Architecture
• Cybersecurity
• Cloud Engineering
• Identity & Access Management
• Network Engineering
• Telecom / Collaboration
• Desktop Engineering
• Mobility Engineering
• Field Services
• Service Desk

Success Metrics

• Endpoint platform stability
• Security compliance score
• Patch & vulnerability compliance
• Device deployment success rate
• User experience metrics
• Incident reduction
• Modernization progress
• Cost optimization
• Architecture adoption across teams

Scope of Role

• Enterprise-wide responsibility
• Influences multiple engineering teams
• Defines standards used across organization
• Leads large transformation initiatives
• Highest technical authority for endpoint platforms
• Typical Career Level
• Senior Architect / Principal Architect
• Enterprise Architect track
• Director track feeder role

Qualifications - External

Ideal Candidates Will Have

• 10+ years in Endpoint / EUC / Desktop / Mobility / VDI engineering
• 5+ years in architecture or senior engineering role
• Expert knowledge of:
• Intune / MECM / Autopilot
• Windows Enterprise
• Entra ID / Active Directory
• Endpoint security & compliance
• VDI / DaaS
• Azure / Microsoft 365
• Conditional Access / Zero Trust
• Strong automation / scripting experience
• Experience designing enterprise-scale solutions

Preferred Qualifications

• Healthcare / Fortune-500 / regulated industry experience
• Experience with:
• Citrix
• VMware Horizon
• Azure Virtual Desktop
• Nexthink / ControlUp
• JAMF / Apple management
• Mobile device management
• Enterprise Architecture experience
• Experience leading large transformations

Minimum Qualifications

• Bachelor's or 4 years of work experience above the minimum qualification
• 10 Years of Experience

Addison Group is an Equal Opportunity Employer. Addison Group provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Addison Group complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. Reasonable accommodation is available for qualified individuals with disabilities, upon request.