Hybrid Windows Endpoint Engineer — MVD, Intune & Security

ZP Group; Morrisville (NC); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Vision & Dental

PTO

Holiday & Sick Leave

Job summary

Piper Companies in Morrisville, NC seeks a Windows Endpoint Engineer to lead design, deployment, and support for enterprise endpoints across Windows, MVD, and macOS environments. The role emphasizes co-management with Intune, SCCM MECM, and CMG, plus strong security controls and Azure Purview integration.

The ideal candidate has 7+ years of hands-on experience in endpoint engineering, directory services, and security architectures, including MFA and BitLocker encryption.

Qualifications

• 7+ years of experience in enterprise endpoint engineering, systems administration, desktop management, and directory services.
• Hands-on experience with Intune, SCCM/MECM, CMG, MVD, and Windows endpoint management.
• Expertise in Azure AD, Defender for Endpoint/Identity, MFA, and endpoint security architecture.
• Experience implementing CMMC Level 2 and NIST SP 800-171 controls (BitLocker, FileVault, encryption).
• Familiarity with Jamf and data governance platforms like Azure Purview.

Responsibilities

• Lead design, deployment, and support of enterprise endpoint solutions across Windows, VDI, and macOS (Jamf).
• Manage endpoint administration and co-management using Intune, SCCM MECM, and CMG.
• Administer identity and security technologies (Azure AD, Defender products, Duo MFA).
• Implement and maintain CMMC Level 2 / NIST SP 800-171 controls, encryption, and device hardening.
• Support data protection initiatives via Azure Purview and secure data exchange.

Tools

Intune

SCCM MECM

CMG

MVD

Azure AD

Defender for Endpoint

Defender for Identity

Jamf

Job description

Piper Companies in Morrisville, NC seeks a Windows Endpoint Engineer to lead design, deployment, and support for enterprise endpoints across Windows, MVD, and macOS environments. The role emphasizes co-management with Intune, SCCM MECM, and CMG, plus strong security controls and Azure Purview integration.

The ideal candidate has 7+ years of hands-on experience in endpoint engineering, directory services, and security architectures, including MFA and BitLocker encryption.