IT Engineer - Endpoint & Device Management

Supermicro; San Jose, Northern (CA, KY); Hybrid; USD 115,000 - 130,000; Full time

Benefits offered by this job

Benefits package

Bonus & equity programs

Job summary

Supermicro seeks an IT Engineer focused on Endpoint & Device Management to expand Microsoft Intune for Windows and mobile devices. The role emphasizes standardizing provisioning, compliance, and lifecycle management across enterprise endpoints.

You will drive Autopilot provisioning, app deployment, and update policies while integrating Entra ID and Defender for Endpoint. Strong scripting and enterprise tool experience are required.

Qualifications

• 5+ years in IT infrastructure or enterprise tech.
• Hands-on with Intune, Windows management, MDM/MAM, device compliance.
• Experience with Autopilot, provisioning, app deployment, Windows updates.
• Knowledge of Entra ID, Conditional Access, authentication and device identity.
• Experience with Defender for Endpoint and endpoint protection.
• Scripting with PowerShell and Microsoft Graph API.
• Understanding of security baselines, certificates, networks and encryption.
• SCCM/Configuration Manager or similar tools a plus.
• Microsoft endpoint/security certifications preferred.

Responsibilities

• Design, implement, administer, and optimize Intune for Windows and mobile devices.
• Set Windows endpoint management standards: enrollment, profiles, compliance, baselines, restrictions, lifecycle.
• Design/operate Autopilot provisioning, deployment profiles, enrollment workflows, build processes.
• Manage certificates, inventory, compliance reporting and dashboards.
• Deploy enterprise apps and Microsoft 365 Apps; manage Windows updates and reporting.
• Integrate endpoint compliance with Entra ID and Conditional Access.
• Configure Defender for Endpoint integration: onboarding, policy deployment, attack surface reduction.
• Troubleshoot enrollment, authentication, deployment, compliance, updates.

Skills

Microsoft Intune

Windows endpoint management

MDM/MAM

PowerShell

Microsoft Graph API

Entra ID

Conditional Access

Windows Autopilot

SCCM/Configuration Manager

Microsoft Defender for Endpoint

Education

Bachelor's degree in Computer Science / IT / related field

Tools

SCCM/Configuration Manager

Job description

Location: San Jose, California, United States

About Supermicro:

Supermicro® is a Top Tier provider of advanced server, storage, and networking solutions for Data Center, Cloud Computing, Enterprise IT, Hadoop/ Big Data, Hyperscale, HPC and IoT/Embedded customers worldwide. We are the #5 fastest growing company among the Silicon Valley Top 50 technology firms. Our unprecedented global expansion has provided us with the opportunity to offer a large number of new positions to the technology community. We seek talented, passionate, and committed engineers, technologists, and business leaders to join us.

Job Summary:

Why This Role Matters:

• Build Modern Endpoint Management: Establish and expand Microsoft Intune-based management for Windows and mobile devices.
• Improve User Experience and Operational Consistency: Standardize device provisioning, application deployment, compliance, updates, and lifecycle management.
• Strengthen Platform Ownership: Work across M365, Entra, Defender, Helpdesk/Desktop IT, InfoSec/SOC, and application teams to deliver scalable endpoint services.

Essential Duties and Responsibilities:

What You’ll Do:

We are seeking a proactive IT Engineer - Endpoint & Device Management to support and expand enterprise endpoint and device management, with a focus on Microsoft Intune, Windows management, and related Microsoft 365/Entra technologies.

• Design, implement, administer, and optimize Microsoft Intune for enterprise Windows and mobile device management.
• Establish Windows endpoint management standards, including enrollment, configuration profiles, device compliance, security baselines, device restrictions, and lifecycle management.
• Design and operate Windows Autopilot provisioning, deployment profiles, enrollment workflows, and standardized device build processes.
• Manage endpoint certificates, configuration standards, device inventory, compliance reporting, and operational dashboards.
• Manage enterprise application deployment, Microsoft 365 Apps deployment, Windows update policies, feature updates, and deployment reporting.
• Integrate endpoint compliance with Entra ID and Conditional Access.
• Configure and maintain Defender for Endpoint platform integration, including onboarding, endpoint policy deployment, attack surface reduction, device control, and endpoint health reporting.
• Troubleshoot complex enrollment, authentication, application deployment, device compliance, update, and endpoint-management issues.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (preferred).
• 5+ years of experience in IT infrastructure, systems engineering, or related enterprise technologies.
• Proven hands-on experience with Microsoft Intune, Windows endpoint management, MDM/MAM, device compliance, and enterprise endpoint administration.
• Experience with Windows Autopilot, modern device provisioning, application deployment, and Windows update management.
• Strong knowledge of Entra ID, Conditional Access, authentication, device identity, and endpoint integration.
• Working knowledge of Microsoft Defender for Endpoint and endpoint protection technologies.
• Strong scripting and automation skills with PowerShell and Microsoft Graph API.
• Understanding of endpoint security baselines, least privilege, certificates, network protocols, and encryption technologies.
• Experience with SCCM/Configuration Manager or other enterprise endpoint-management tools is a plus.
• Microsoft endpoint or security certifications are preferred.

Salary Range

$115,000 - $130,000

The salary offered will depend on several factors, including your location, level, education, training, specific skills, years of experience, and comparison to other employees already in this role. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation, such as participation in bonus and equity award programs.

EEO Statement

Supermicro is an Equal Opportunity Employer and embraces diversity in our employee population. It is the policy of Supermicro to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status or special disabled veteran, marital status, pregnancy, genetic information, or any other legally protected status.