Modern Endpoint Engineer: Intune & Security

Oaktree Capital Management, L.P.

Los Angeles (CA)

On-site

USD 125,000 - 160,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Oaktree Capital Management, L.P. is seeking a highly skilled Endpoint Engineer to support the Information Security team.

You will own and modernize the endpoint management platform, transitioning from SCCM to cloud-native solutions and driving automation for efficient operations. Responsibilities include implementing Intune configurations, managing the Windows lifecycle, and ensuring security compliance across devices.

Qualifications

5+ years of relevant experience.
Strong troubleshooting across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.
Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.

Responsibilities

Own and continuously improve the modern endpoint management platform (Intune, Autopilot, Entra ID) and related technologies.
Manage the full Windows endpoint lifecycle: provisioning, enrollment, configuration, compliance, deployment, patching, OS upgrades, troubleshooting, retirement.
Lead transition from SCCM/MECM to cloud-native endpoint management; decommission legacy infra.
Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and consistency.
Design, implement, and optimize Intune configuration profiles, policies, app deployments, and enrollment profiles.
Support Entra joined, hybrid-joined, co-managed, cloud-native device management scenarios.
Develop standardized processes for device provisioning, refresh, rebuilds, feature updates, and hardware lifecycle management.
Implement and maintain endpoint security controls (BitLocker, Defender, Windows LAPS, Hello for Business, firewall policies).
Configure and monitor compliance policies; plan OS migrations and feature updates; automate remediation.
Package, deploy, test applications using Intune; manage Win32 deployments; script automation.
Act as escalation point for complex endpoint issues; participate in incident response and continuous service improvement.
Maintain endpoint architecture documentation and collaborate with Security, Identity, Infra, Networking, Procurement, and Service Desk.