Modern Workplace Engineer

Nature's Way; United States; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical options

Dental plan

Vision plan

Paid holidays

401K match

Disability insurance

Life insurance

Flexible spending accounts

Parental leave

Educational assistance

Product discounts

Job summary

Nature's Way is seeking a Modern Workplace Engineer to design, modernize, and govern Microsoft 365‑based workplace platforms. You will own endpoint, mobility, and collaboration technology standards with a focus on secure, Zero Trust architecture across Windows, macOS, iOS, and Android.

The role emphasizes automation, policy governance, and cross‑team collaboration with Security, Cloud, Systems, and Network groups to deliver scalable, compliant workplace solutions.

Qualifications

• Extensive experience with Microsoft Intune and policy governance.
• Strong PowerShell and Microsoft Graph automation skills.
• Experience with Windows Autopilot and device enrollment strategies.
• Knowledge of Azure Virtual Desktop design and image strategy.
• Familiarity with Zero Trust, Conditional Access, and Entra ID.
• Experience in Power Platform governance and environment strategy.
• Ability to translate business and security requirements into scalable designs.

Responsibilities

• Own the technical design and maturity of Intune configuration, compliance, and policy design across Windows, macOS, iOS, and Android.
• Define workplace technology standards and lifecycle strategy for endpoint, mobility, and collaboration devices.
• Govern the enterprise application catalog, packaging standards, deployment patterns, and patch management.
• Design and governance of Windows Autopilot and cloud-native management models with Entra ID and CA.
• Develop PowerShell and Graph automation to orchestrate cross‑platform configuration governance and remediation.
• Contribute to Power Platform governance and secure workflow integration across Microsoft 365.
• Implement endpoint, mobility, and identity security controls aligned with Zero Trust.

Skills

Intune configuration

PowerShell

Microsoft Graph automation

Azure Virtual Desktop

Zero Trust

Power Platform governance

Device enrollment strategies

Tools

Power Automate

Microsoft 365 admin center

Job description

Modern Workplace Engineer

Be a part of helping people live healthy lives as our new Modern Workplace Engineer.

SUMMARY

The Modern Workplace Engineer is responsible for the design, modernization, and continuous evolution of enterprise workplace technology platforms across the Microsoft 365 ecosystem. This role owns the design standards, configuration governance, automation frameworks, and strategic roadmap for endpoint management, identity‑integrated access controls, collaboration platforms, and workplace enablement services.

Scope includes Windows endpoints, enterprise mobility (iOS and Android), Azure Virtual Desktop, enterprise print services, Microsoft Teams Rooms, and their integration with Microsoft 365 services including Intune, Entra ID, Conditional Access, Teams, SharePoint Online, and compliance controls.

This is a hands‑on engineering role accountable for platform design, lifecycle strategy, service governance, and automation delivery. The Engineer partners closely with Security, Cloud, Systems, and Network teams to deliver a secure, scalable, and Zero Trust‑aligned modern workplace experience.

RESPONSIBILITIES

• Own the technical design and maturity of Microsoft Intune configuration, compliance, and policy design across Windows, macOS, iOS, and Android (including BYOD security models)
• Define workplace technology standards, configuration baselines, and lifecycle strategy across endpoint, mobility, and collaboration‑integrated devices
• Own the design and governance of the enterprise application catalog, including packaging standards, deployment patterns, lifecycle and patch management, and integration with Intune and Microsoft 365 application delivery models
• Design Windows Autopilot, mobile enrollment, and cloud‑native management models integrated with Microsoft Entra ID, Conditional Access, and Microsoft 365 compliance frameworks
• Develop PowerShell and Microsoft Graph automation to orchestrate cross‑platform configuration governance, policy deployment, and automated remediation across endpoint and Microsoft 365 services
• Establish standards and engineering practices that deliver a consistent and reliable end‑user experience across enterprise devices and workplace technologies
• Contribute to Power Platform governance by managing Power Automate environments, establishing automation standards, and supporting secure workflow integration across Microsoft 365 services
• Implement and govern endpoint, mobility, and identity‑aligned security controls consistent with Zero Trust design and Microsoft 365 security best practices
• Contribute to Microsoft 365 collaboration governance, including Teams policy design, SharePoint Online integration standards, and lifecycle management patterns for collaboration workspaces
• Own the design standards and lifecycle strategy for Microsoft Teams Rooms and meeting room technologies, ensuring alignment with Teams service governance and collaboration platform controls
• Lead Azure Virtual Desktop (AVD) design and modernization, including image strategy, profile management, and integration with Microsoft 365 identity and productivity services
• Own the design and lifecycle strategy for enterprise print services, including secure configuration baselines and cloud/hybrid print modernization
• Contribute to modern workplace roadmap planning, including platform maturity initiatives, Copilot readiness considerations, and secure service enablement within Microsoft 365
• Act as final escalation point for systemic platform issues across endpoint, mobility, collaboration‑integrated devices, virtual desktop, and print infrastructure
• Mentor administrators and adjacent engineering teams in modern workplace architectural standards, automation practices, and governance models
• Participate in 24x7 on‑call rotation with accountability for assigned platform domains

QUALIFICATIONS

• 5+ years of enterprise endpoint engineering experience across Windows, macOS and enterprise mobility platforms (iOS and Android)
• Deep experience designing and governing Microsoft Intune configuration, compliance, and policy frameworks
• Strong PowerShell and Microsoft Graph automation experience, including scalable deployment and remediation patterns
• Experience designing Windows Autopilot and modern device enrollment strategies
• Strong understanding of endpoint and mobility security controls (Windows Hello for Business, LAPS, Endpoint Privilege Management, configuration baselines, MAM/BYOD controls)
• Experience managing Power Automate environments and contributing to Power Platform governance, including environment strategy and DLP policy configuration
• Working knowledge of Microsoft 365 compliance, information protection, and collaboration service integration
• Experience contributing to Microsoft Teams policy design and SharePoint Online governance patterns
• Experience leading platform modernization initiatives or architectural redesign efforts
• Experience with Azure Virtual Desktop design and image strategy
• Experience designing and governing enterprise print services (cloud/hybrid print models)
• Experience designing and governing Microsoft Teams Rooms or similar meeting room technologies
• Working knowledge of identity‑device integration, Conditional Access, and Zero Trust principles
• Ability to translate business and security requirements into scalable technical designs

BENEFITS

All benefits are effective on day 1 of employment.

• MedicalOption to select either a PPO plan or one of 2 high‑deductible medical plans that includes a company contribution to your personal health savings account.
• DentalDelta Dental PPO and an option to select an enhanced dental plan.
• VisionRoutine preventative coverage under medical plan and an option to elect additional voluntary coverage.
• Time OffAll employees receive 11 holidays off per year, as well as paid time off that starts at a minimum of two weeks per year.
• 401K PlanCompany match of up to 4% as long as employees contribute a minimum of 6% to the account. An additional profit‑sharing contribution is also made to employee accounts if the company meets its annual targets.
• Company provided short‑term & long‑term disability
• Life and AD&D insurance
• Flexible spending accounts
• Voluntary critical illness & accident coverage
• New parent phase‑in program & paternity leave
• Educational assistance reimbursement
• Product discounts & a wellness program

Start Helping People live Healthy lives today!

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60‑1.35(c)