IT Engineer – Endpoint & Device Management

Jobtailor; San Jose (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Jobtailor in San Jose, CA seeks an experienced IT infrastructure professional to design, implement, and optimize Microsoft Intune and Windows endpoint management for enterprise environments.

You will manage Autopilot provisioning, enrollment workflows, device compliance, and integration with Entra ID, Defender for Endpoint, and Microsoft 365 apps, delivering scalable endpoint services across IT and security teams.

Qualifications

• 5+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.

Responsibilities

• Design, implement, administer, and optimize Microsoft Intune for enterprise Windows and mobile device management
• Establish Windows endpoint management standards, including enrollment, configuration profiles, device compliance, security baselines, device restrictions, and lifecycle management
• Design and operate Windows Autopilot provisioning, deployment profiles, enrollment workflows, and standardized device build processes
• Manage endpoint certificates, configuration standards, device inventory, compliance reporting, and operational dashboards
• Manage enterprise application deployment, Microsoft 365 Apps deployment, Windows update policies, feature updates, and deployment reporting
• Integrate endpoint compliance with Entra ID and Conditional Access
• Configure and maintain Defender for Endpoint platform integration, including onboarding, endpoint policy deployment, attack surface reduction, device control, and endpoint health reporting
• Troubleshoot complex enrollment, authentication, application deployment, device compliance, update, and endpoint-management issues
• Work across M365, Entra, Defender, Helpdesk/Desktop IT, InfoSec/SOC, and application teams to deliver scalable endpoint services

Skills

Microsoft Intune Administration

Windows Endpoint Management

PowerShell Scripting

Windows Autopilot Provisioning

Entra ID Integration

Education

Bachelor's degree in Computer Science/Information Technology

Tools

SCCM/Configuration Manager

Microsoft Graph API

Defender for Endpoint

Job description

• Design, implement, administer, and optimize Microsoft Intune for enterprise Windows and mobile device management
• Establish Windows endpoint management standards, including enrollment, configuration profiles, device compliance, security baselines, device restrictions, and lifecycle management
• Design and operate Windows Autopilot provisioning, deployment profiles, enrollment workflows, and standardized device build processes
• Manage endpoint certificates, configuration standards, device inventory, compliance reporting, and operational dashboards
• Manage enterprise application deployment, Microsoft 365 Apps deployment, Windows update policies, feature updates, and deployment reporting
• Integrate endpoint compliance with Entra ID and Conditional Access
• Configure and maintain Defender for Endpoint platform integration, including onboarding, endpoint policy deployment, attack surface reduction, device control, and endpoint health reporting
• Troubleshoot complex enrollment, authentication, application deployment, device compliance, update, and endpoint-management issues
• Work across M365, Entra, Defender, Helpdesk/Desktop IT, InfoSec/SOC, and application teams to deliver scalable endpoint services

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred)
• 5+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies
• Proven hands-on experience with Microsoft Intune, Windows endpoint management, MDM/MAM, device compliance, and enterprise endpoint administration
• Experience with Windows Autopilot, modern device provisioning, application deployment, and Windows update management
• Strong knowledge of Entra ID, Conditional Access, authentication, device identity, and endpoint integration
• Working knowledge of Microsoft Defender for Endpoint and endpoint protection technologies
• Strong scripting and automation skills with PowerShell and Microsoft Graph API
• Understanding of endpoint security baselines, least privilege, certificates, network protocols, and encryption technologies
• Experience with SCCM/Configuration Manager or other enterprise endpoint-management tools is a plus
• Microsoft endpoint or security certifications are preferred

Core Competencies

Demonstrates expertise in Microsoft Intune and Windows endpoint management, with a strong focus on device compliance, security baselines, and enterprise application deployment. Proficient in scripting and automation using PowerShell and Microsoft Graph API to optimize endpoint services.

Highest-signal resume keywords

• Microsoft Intune Administration
• Windows Endpoint Management
• PowerShell Scripting
• Windows Autopilot Provisioning
• Entra ID Integration

Hard Skills

• Device Compliance
• Enterprise Endpoint Administration
• Application Deployment
• Windows Update Management
• Endpoint Security Baselines
• SCCM/Configuration Manager
• Microsoft Graph API
• Endpoint Protection Technologies
• Device Identity Management
• Network Protocols

Certifications & Qualifications

• Microsoft Endpoint Certifications

Industry Keywords

• IT Infrastructure
• Systems Engineering
• MDM/MAM
• Conditional Access
• Authentication

Tools & Technologies

• Microsoft 365
• Defender for Endpoint
• Helpdesk/Desktop IT
• InfoSec/SOC