Manager, Endpoint Engineering

Citizens; Johnston (RI); On-site; USD 134,000 - 179,000; Full time

Job summary

Citizens is seeking a Manager, Endpoint Engineering to lead a team responsible for Windows, Mac, and mobile endpoints in a highly regulated banking environment. You will drive two pods: one for operational support and another for vulnerability management, patching, and remediation, aligning device management with security and colleague experience.

You will guide endpoint technologies such as Microsoft Intune and Configuration Manager, partnering with cybersecurity, service desk, risk, and

Qualifications

• Significant experience in endpoint engineering, desktop operations, or related tech function.
• Experience leading technical teams, including coaching and prioritizing delivery.
• Hands-on with enterprise Windows endpoints using Intune/Config Manager.
• Experience with endpoint patch management, remediation, and compliance reporting.
• Understanding of endpoint security practices, baselines, hardening, and lifecycle management.
• Able to lead across overlap of operational, security, patching, and user experience.
• Strong communication and stakeholder management in a regulated environment.

Responsibilities

• Lead, coach, and develop a team of endpoint engineers across specialized functions.
• Oversee Windows endpoint operations, including configuration, deployment, policy management, and lifecycle support.
• Provide leadership for endpoint management tools like Intune and Configuration Manager.
• Guide vulnerability management, patching, compliance reporting, and escalation.
• Partner with cybersecurity, risk, compliance, and other teams to align services with business needs.
• Establish operating practices and ownership boundaries across endpoint functions.
• Improve device reliability and colleague experience using health data and trends.
• Lead complex endpoint issue resolution, incident response, and root cause analysis.
• Support modernization, tech refresh, and process improvements.
• Promote an inclusive, accountable, and service-oriented team culture.

Skills

Endpoint engineering

Team leadership

Windows management

Intune CCM

Vulnerability mgmt

Regulated environment

Communication

Tools

Microsoft Intune

Configuration Manager

Patch management tools

Job description

Description

Dallas TX, Nashville TN, Short Hills NJ, Westwood or Medford MA,

Role is not relocation eligible.

Manager, Endpoint Engineering

Job Overview

The Manager, Endpoint Engineering will lead an engineering team responsible for the security, reliability, management, and support of the Bank’s endpoint environment, including Windows, Mac, and mobile devices. This role will guide two closely connected pods: one focused on operational support and management of Windows endpoints using Microsoft Intune, Microsoft Configuration Manager, and related technologies; and another focused on endpoint vulnerability management, patching, compliance, and remediation. This is an opportunity to shape an integrated endpoint operations model that connects device management, security, patch compliance, and colleague experience in a highly regulated banking environment.

4 Days in the office from any of our locations in Johnston RI, Dallas TX, Nashville TN, Short Hills NJ, Westwood or Medford MA,

Role is not relocation eligible.

Manager, Endpoint Engineering

Job Overview

The Manager, Endpoint Engineering will lead an engineering team responsible for the security, reliability, management, and support of the Bank’s endpoint environment, including Windows, Mac, and mobile devices. This role will guide two closely connected pods: one focused on operational support and management of Windows endpoints using Microsoft Intune, Microsoft Configuration Manager, and related technologies; and another focused on endpoint vulnerability management, patching, compliance, and remediation. This is an opportunity to shape an integrated endpoint operations model that connects device management, security, patch compliance, and colleague experience in a highly regulated banking environment.

What You’ll Do

• Lead, coach, and develop a team of endpoint engineers across specialized but highly collaborative endpoint operations functions.
• Oversee operational support for Windows endpoints, including device configuration, software deployment, endpoint policy management, troubleshooting, and lifecycle support.
• Provide leadership for endpoint management technologies, including Microsoft Intune, Microsoft Configuration Manager, and related tools used to manage, secure, and support client devices.
• Guide endpoint vulnerability management and patching activities, including risk-based prioritization, remediation tracking, compliance reporting, and escalation.
• Partner with cybersecurity, infrastructure, service desk, risk, compliance, Digital Employee Experience (DEX), and business technology teams to ensure endpoint services are secure, resilient, and aligned to business needs.
• Establish clear operating practices, ownership boundaries, and collaboration routines across endpoint operations, patching, vulnerability management, security, and user experience.
• Use endpoint health data, service trends, and stakeholder feedback to improve device reliability, compute performance, patch compliance, and colleague technology experience.
• Lead resolution of complex endpoint issues, including Tier III escalations, incident response, root cause analysis, and problem remediation.
• Support endpoint modernization efforts, technology refreshes, platform migrations, and process improvements.
• Promote an inclusive, accountable, and service-oriented team culture focused on technical quality, risk management, continuous improvement, and strong colleague support.

Minimum Qualifications

• Significant experience in endpoint engineering, desktop operations, systems administration, infrastructure operations, vulnerability management, or a related technology function.
• Experience leading technical teams, including coaching engineers, setting priorities, managing performance, and coordinating operational delivery.
• Hands‑on experience supporting and managing enterprise Windows endpoint environments using tools such as Microsoft Intune, Microsoft Configuration Manager, or related endpoint management platforms.
• Experience with endpoint patch management, vulnerability remediation, compliance reporting, and risk-based prioritization.
• Understanding of endpoint security practices, including configuration baselines, operating system hardening, endpoint protection, and vulnerability lifecycle management.
• Ability to lead across overlapping operational, security, patching, and user experience responsibilities.
• Strong communication, analytical, stakeholder management, and escalation leadership skills.
• Ability to operate effectively in a regulated environment with a focus on risk management, documentation, audit readiness, resiliency, and operational controls.

Additional Experience We Value

• Experience in banking, financial services, or another highly regulated industry.
• Experience with Mac, mobile, Jamf, iOS, Android, or modern device management at enterprise scale.
• Familiarity with Nexthink, DEX platforms, endpoint analytics, or user experience measurement tools.
• Experience partnering with DEX, Service Desk, Desktop, Cyber Security, and Infrastructure teams to improve compute performance, device reliability, supportability, and colleague experience.
• Experience with automation, PowerShell, endpoint reporting, patch automation, compliance dashboards, or operational metrics.
• Relevant Microsoft, Apple, Jamf, ITIL, cybersecurity, or endpoint management certifications.

Pay Transparency

The salary range for this position is $134,000 – $179,000 per year, plus an opportunity to earn additional incentive earnings (if applicable). Actual pay is based on various factors including, but not limited to, the budget, work location, and relevant skills and experience. We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits.

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Why Work for Us

At Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth.

Posting End Date: 10/30/2026