Senior Configuration Management Engineer

East West Bank; El Monte (CA); On-site; USD 28,000 - 62,000; Full time

Job summary

East West Bank is seeking a highly skilled IT Engineer focused on Microsoft Intune and endpoint management. The role covers managing enterprise devices, security baselines, and automation to strengthen vulnerability remediation.

Ideal candidates will have hands-on experience with Intune, Entra ID, Windows Autopilot, and PowerShell, with familiarity in Jamf Pro and Ivanti endpoints optional. This is an on-site IT operations position supporting a regulated financial services environment.

Qualifications

• 5+ years of Microsoft Intune administration experience.
• 3+ years of Microsoft Entra ID (Azure AD) administration.
• 3+ years of Windows Autopilot deployment experience.
• Experience with patch management and endpoint security.
• Experience working in regulated environments (financial services a plus).

Responsibilities

• Administer and maintain Microsoft Intune across devices (Windows, macOS, iOS, Android).
• Configure compliance policies, configuration profiles, and security baselines.
• Support vulnerability remediation and patch management efforts.
• Develop PowerShell automation for deployment, remediation, and reporting.
• Collaborate with cybersecurity and infrastructure teams on risk reduction.

Skills

Intune administration

Endpoint management

Azure AD / Entra ID

Windows Autopilot

PowerShell scripting

Education

Certifications: MD-102

CompTIA Security+ or equivalent

Tools

Jamf Pro

Ivanti Endpoint Manager

Qualys / Rapid7 / Nessus

Job description

Introduction

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.

Introduction

Since 1973, East West Bank has served as a pathway to success. With over 110 locations across the U.S. and Asia, we are the premier financial bridge between the East and West. Our teams of experienced, multi-cultural professionals help guide businesses and community members on both sides of the Pacific looking to explore new markets and create new opportunities, and our sustained growth and expertise in industries like real estate, entertainment and media, private equity and venture capital, and high-tech help build sustainable businesses and expand our associates’ potential for career advancement.

Headquartered in California, East West Bank (Nasdaq: EWBC) is a top-performing commercial bank with a strong foundation, an enterprising spirit and a commitment to absolute integrity. East West Bank gives people the confidence to reach further.

Overview

We are seeking a highly motivated Microsoft Intune focused engineer to join our IT Operations and Vulnerability Management team. This role will be responsible for managing enterprise endpoint solutions, enhancing endpoint security, supporting vulnerability remediation efforts, and automating device management processes across the organization. The ideal candidate has strong experience with Microsoft Intune, Microsoft Entra ID, Windows Autopilot, PowerShell automation, endpoint security, and patch management. Experience with Jamf Pro and Ivanti Endpoint Manager is highly desirable.

Responsibilities

Endpoint Management

• Administer and maintain Microsoft Intune.
• Configure compliance policies, configuration profiles, and security baselines.
• Manage Windows Autopilot deployments.
• Support Windows, macOS, iOS, and Android devices.
• Maintain enterprise endpoint standards and configurations.

Application Management

• Package, test, and deploy enterprise applications.
• Manage software distribution and updates.
• Support deployment of Microsoft and third-party applications.

Security & Vulnerability Management

• Support vulnerability remediation initiatives.
• Implement security hardening standards and endpoint security controls.
• Monitor compliance and investigate endpoint security issues.
• Partner with cybersecurity and infrastructure teams on risk reduction efforts.

Patch Management

• Manage operating system and third-party application patching.
• Monitor patch compliance and remediation reporting.
• Assist with vulnerability reduction efforts across endpoint platforms.

Automation & Engineering

• Develop PowerShell automation solutions.
• Automate endpoint deployment, remediation, and reporting tasks.
• Integrate endpoint management technologies with enterprise systems.

Operational Support

• Provide Tier 3 support for endpoint-related issues.
• Troubleshoot policy, configuration, and application deployment problems.
• Participate in operational, infrastructure, and security projects.
• Create and maintain technical documentation.

Qualifications

Required Qualifications

• 5+ years of Microsoft Intune administration experience.
• 5+ years of endpoint management experience.
• 3+ years of Microsoft Entra ID (Azure AD) administration.
• 3+ years of Windows Autopilot deployment experience.
• Experience supporting Windows 11 and macOS devices.
• Experience with patch management and endpoint security.
• Strong PowerShell scripting skills.

Preferred Qualifications

• Experience with Jamf Pro administration.
• Experience with Ivanti Endpoint Manager.
• Experience with vulnerability management tools such as Qualys, Rapid7, or Nessus.
• Experience in financial services or other regulated industries.
• Experience supporting Azure Virtual Desktop (AVD) or VDI environments.

Certifications Required

• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• CompTIA Security+ (or equivalent)

Skills & Competencies

• Strong analytical and troubleshooting skills
• Excellent communication and documentation abilities
• Ability to work independently and collaboratively
• Strong focus on security, compliance, and automation
• Ability to manage multiple priorities in a fast-paced environment

Applicants must have legal authorization to work in the United States. We do not offer visa sponsorship at this time.

Compensation

The base pay range for this position is USD $20.00/Hr. - USD $45.00/Hr. Exact offers will be determined based on job-related knowledge, skills, experience, and location.