IT Endpoint Engineer

Spheros Environmental; Denver (CO); Hybrid; USD 100,000 - 125,000; Full time

Benefits offered by this job

Hybrid flexibility

Bonuses & 401(k) contributions

Professional growth

Inclusive culture

Job summary

Spheros Environmental is hiring an IT Endpoint Engineer to focus on escalations and packaging governance for Windows endpoints, on-prem servers, and Azure services. You’ll manage Entra, Intune, and app packaging while driving centralized identity through SSO/SCIM.

Hybrid role with Denver/CO or Petaluma/CA; compensation $100,000–$125,000 annually, negotiable based on experience. Join a team committed to customer service and IT excellence.

Qualifications

• 8+ years of progressive IT support and infrastructure experience in a Microsoft 365 environment.
• Strong written communication and documentation skills.
• Extensive experience with Entra, Intune, and application packaging.
• Proven SSO, SAML, SCIM, OAuth, and Enterprise App setups.
• Working knowledge of Cloudflare WARP/Zero Trust, Windows Server, Active Directory, VMware vCenter, Veeam, Azure Files, and SentinelOne.

Responsibilities

• Resolve Tier 2/3 escalations for Windows endpoints, identity, file access, on-prem servers, and Azure services.
• Lead packaging, testing, deploying, updating, and retiring COTS applications using Intune, PatchMyPC, NinjaOne, and PowerShell.
• Move application inventory toward centralized identity via SSO and SCIM; perform user audits and governance.
• Document procedures, write KB guides, and identify automation opportunities.
• Create application documentation, packaging notes, training materials and tips.
• Support general IT infrastructure both on-prem and in Azure.

Skills

Customer-first support

Intune Admin

App Packaging

App deployment

Documentation

KB Articles

Azure/On-prem

SSO/SCIM/OAuth

Cloudflare WARP

VMware vCenter

Veeam

SentinelOne

Windows Server

Active Directory

Entra

PowerShell

Tools

Microsoft Intune

PatchMyPC

NinjaOne

PowerShell

Entra

Cloudflare WARP

NinjaOne

Microsoft 365

Job description

IT Endpoint Engineer

Brief Description

IT Endpoint Engineer

Location:

Hybrid (Denver, CO or Petaluma, CA)

Compensation:

$100,000-$125,000 annually (negotiable based on experience)

Position Summary

We are seeking an experienced Endpoint Engineer to focus on two core areas: resolving advanced ticket escalations and leading our application packaging and governance efforts. This role is reserved for someone who brings a customer-service-oriented approach to every staff interaction. Primarily, this role will handle Tier 2 / Tier 3 issues involving Windows endpoints, identity, file access, on-prem servers, and Azure services. Key technologies include Entra, Cloudflare One, Veeam, VMware vCenter, Windows Server, Azure Files, and SentinelOne. As a secondary focus, the Engineer will wrangle our COTS applications — including packaging, testing, deploying, documenting, updating, and retiring applications using Microsoft Intune, PatchMyPC, NinjaOne, and PowerShell. This includes moving the application inventory toward centralized identity through SSO and SCIM as well as performing user audits and governance.

Key Qualifications

• Deliver excellent support with a customer-first approach to ticket ownership, communication, and follow-through.
• Administer Microsoft Intune for endpoint enrollment, configuration, compliance, and lifecycle management.
• Package, test, deploy, update, and retire applications.
• Perform periodic application ownership reviews, user audits, and license optimization.
• Improve Help Desk efficiency by documenting procedures, writing KB guides, and identifying opportunities for automation and process improvement.
• Create application documentation, packaging notes, training materials and tips.
• Support general IT infrastructure both on-prem and in Azure.

Qualifications

• 8+ years of progressive IT support, systems administration, endpoint management, and infrastructure experience in a Microsoft 365 environment.
• Must have: Good writing and documentation skills.
• Must have: Extensive experience with Entra, Intune, and application packaging.
• Must have: Proven track record of SSO, SAML, SCIM, OAuth, and Enterprise App setups.
• Must have: Working knowledge of Cloudflare WARP / Zero Trust concepts, Windows Server, Active Directory, VMware vCenter, Veeam, Azure Files, Microsoft 365, and endpoint security tools such as SentinelOne.
• Nice to have: Jamf Connect, Apple Business Manager, and MacOS endpoint management experience.
• Nice to have: Working knowledge of Jira or similar tools.
• Nice to have: Power Automate, Azure functions, Entra Lifecycle Management.

Why Spheros Environmental?

• Hybrid Flexibility: Enjoy a balanced work-life with the option to work from home one day per week.
• Competitive Compensation: Generous salary range with bonuses and 401(k) contributions.
• Professional Growth: Opportunities for continuous learning, training, and advancement.
• Inclusive Culture: Join a company that values collaboration and client service.
• Opportunities to provide clients with services from all of Spheros Environmental practice areas.

Spheros Environmental is an equal-opportunity employer.