Hybrid Endpoint Engineer: Automation, Intune & Autopilot

Frank, Rimerman + Co. LLP; San Jose (CA); Hybrid; USD 115,000 - 130,000; Full time

Job summary

Frank, Rimerman + Co. LLP in San Jose is seeking a hands-on Modern Endpoint Engineer to own endpoint administration, security, automation, and continuous improvement across Windows and mobile devices in a hybrid environment.

You will manage SCCM/MECM and Intune, implement Autopilot provisioning, patching, and reporting, and partner with Infrastructure, Security, Solutions Delivery, and Service Desk to deliver a secure, reliable endpoint experience.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field preferred; equivalent professional experience, technical training, or relevant certifications may be considered.
• Microsoft Certifications in Intune, Endpoint Administration, Azure, or Microsoft 365 are a plus.

Responsibilities

• Administer, maintain, and troubleshoot Microsoft Configuration Manager (SCCM/MECM) and Microsoft Intune, including collections, client health, policies, inventory, software distribution, compliance, and reporting.
• Manage Windows endpoint configuration and lifecycle activities, including imaging, task sequences, drivers, operating system deployment, patching, upgrades, and application delivery.
• Develop modern provisioning workflows with Windows Autopilot and support the evolving integration and coexistence of Intune and Configuration Manager.
• Monitor endpoint health, compliance, and performance; resolve issues methodically while minimizing disruption and improving the employee experience.
• Package, test, deploy, update, document, and retire business applications through Configuration Manager and Intune.
• Establish repeatable deployment standards that improve reliability and reduce support effort.
• Investigate and resolve application installation and deployment issues, including detection rules, distribution failures, and client-side problems, in partnership with support teams and vendors.
• Build PowerShell scripts and use Microsoft Graph or other APIs to automate endpoint administration and reduce manual effort.
• Create reports and dashboards that provide visibility into endpoint health, compliance, performance, and trends.
• Maintain clear documentation for processes, procedures, and automation workflows while identifying opportunities to simplify and standardize operations.
• Configure and maintain endpoint security baselines, policies, controls, and compliance settings aligned with organizational standards.
• Administer Microsoft Defender for Endpoint and partner with Information Security on vulnerability remediation, investigations, and security initiatives.
• Provide accurate endpoint data, documentation, and evidence for audit and compliance needs while balancing security requirements with a user-conscious experience.
• Administer mobile device management through Microsoft Intune, including enrollment, configuration profiles, applications, compliance, and security settings.
• Support the transition from Lookout to Intune and troubleshoot enrollment or management issues to maintain a consistent user experience.
• Maintain mobile device management standards, procedures, and documentation.
• Recommend and implement improvements that strengthen endpoint reliability, security, performance, efficiency, and the employee technology experience.
• Stay current on modern endpoint management technologies and participate in proofs of concept and evaluations that shape future capabilities.
• Continuously refine endpoint standards, processes, and best practices as organizational needs evolve.
• Provide Tier II/III support for complex endpoint issues and escalations.
• Collaborate with Infrastructure, Security, Solutions Delivery, Service Desk, vendors, and service providers on endpoint initiatives and issue resolution.
• Serve as a technical resource and mentor by sharing guidance, best practices, knowledge base articles, documentation, and training materials.

Skills

SCCM/MECM

Intune

Windows Autopilot

Patch management

Endpoint security

PowerShell

Microsoft Graph API

Education

Bachelor's degree in IT/CS

Tools

PowerShell

Microsoft Graph API

Job description

Frank, Rimerman + Co. LLP in San Jose is seeking a hands-on Modern Endpoint Engineer to own endpoint administration, security, automation, and continuous improvement across Windows and mobile devices in a hybrid environment.

You will manage SCCM/MECM and Intune, implement Autopilot provisioning, patching, and reporting, and partner with Infrastructure, Security, Solutions Delivery, and Service Desk to deliver a secure, reliable endpoint experience.