Manager, Endpoint Engineering

Citizens Bank; Johnston (RI); Hybrid; USD 134,000 - 179,000; Full time

Job summary

Citizens Bank is seeking a Manager of Endpoint Engineering to lead a team responsible for Windows, Mac, and mobile device management. You will guide two pods—one for operational support and another for vulnerability management—connecting device management with security and colleague experience in a regulated banking environment.

The role emphasizes coaching, strategic direction, and collaboration with cybersecurity, risk, and DEX teams to ensure secure, reliable endpoint services and continuous

Qualifications

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.
• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.
• Hands‑on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.
• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk‑based prioritization.
• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.
• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.
• Strong communication, analytical, stakeholder management, and escalation leadership skills.
• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

Responsibilities

• Lead, coach, and develop a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.
• Oversee operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.
• Provide leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.
• Guide endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.
• Partner with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.
• Establish clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.
• Use endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.
• Lead resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.
• Support endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.
• Promote an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

Skills

Endpoint engineering

Team leadership

Intune

Configuration Manager

Patch management

Security practices

Cross-functional collaboration

Regulatory/compliance

Communication

Tools

Intune

Configuration Manager

Jamf

Nexthink

Job description

Description

4 Days in the office from any of our locations in Johnston RI, Dallas TX, Nashville TN, Short Hills NJ, Westwood or Medford MA,

Role is not relocation eligible.

Manager, Endpoint Engineering

Job Overview

The Manager, Endpoint Engineering will lead an engineering team responsible for the security, reliability, management, and support of the Bank’s endpoint environment, including Windows, Mac, and mobile devices. This role will guide two closely connected pods: one focused on operational support and management of Windows endpoints using Microsoft Intune, Microsoft Configuration Manager, and related technologies; and another focused on endpoint vulnerability management, patching, compliance, and remediation. This is an opportunity to shape an integrated endpoint operations model that connects device management, security, patch compliance, and colleague experience in a highly regulated banking environment.

What You’ll Do

• Lead, coach, and develop a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.

• Oversee operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.

• Provide leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.

• Guide endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.

• Partner with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.

• Establish clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.

• Use endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.

• Lead resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.

• Support endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.

• Promote an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

Minimum Qualifications

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.

• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.

• Hands‑on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.

• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk‑based prioritization.

• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.

• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.

• Strong communication, analytical, stakeholder management, and escalation leadership skills.

• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

Additional Experience We Value

• Experience in banking, financial services, or another highly regulated industry.

• Experience with Mac, mobile, Jamf, iOS, Android, or modern device management at enterprise scale.

• Familiarity with Nexthink, DEX platforms, endpoint analytics, or user experience measurement tools.

• Experience partnering with DEX, Service Desk, Desktop, Cyber Security, and Infrastructure teams to improve compute performance, device reliability, supportability, and colleague experience.

• Experience with automation, PowerShell, endpoint reporting, patch automation, compliance dashboards, or operational metrics.

• Relevant Microsoft, Apple, Jamf, ITIL, cybersecurity, or endpoint management certifications.

Pay Transparency

The salary range for this position is $134,000 – $179,000 per year, plus an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience.

We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time‑away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.