Senior Endpoint Automation & Security Engineer - Hybrid

Cypress HCM; Denver (CO); Hybrid; USD 76,000 - 85,000; Part time

Job summary

Cypress HCM is seeking an Endpoint Engineer to support a large enterprise desktop environment. This role focuses on reliable, secure, and standardized endpoint services, with automation, patching, device lifecycle management, and cloud transition initiatives.

The candidate will hands-on manage Windows devices, Intune, SCCM, Autopilot, Entra ID, and PowerShell automation, collaborate with security and IT teams, and travel up to 25% to regional locations as needed.

Qualifications

• Significant hands-on experience supporting Microsoft Configuration Manager (SCCM) in a large/complex org.
• Strong working knowledge of Microsoft Intune, Active Directory and Group Policy.
• Experience managing Windows 10/11 deployments, imaging, and device lifecycle activities.
• Experience with enterprise app deployment, packaging, patching, and vulnerability remediation.
• Strong PowerShell capabilities to automate repetitive admin tasks.
• Understanding of endpoint compliance, governance, and reporting.
• Solid knowledge of endpoint security principles and secure configuration practices.
• Strong troubleshooting and analytical skills with independent problem solving.

Responsibilities

• Engineer, administer, and maintain enterprise Windows desktop and laptop environments.
• Manage devices throughout their lifecycle, including provisioning, deployment, configuration, upgrades, refreshes, and retirement.
• Administer and optimize endpoint management technologies including Microsoft Intune, SCCM, Windows Autopilot, and Microsoft Entra ID.
• Package, test, and distribute applications and software across enterprise environments.
• Create and maintain PowerShell scripts and automation to improve deployment, remediation, and administrative processes.
• Coordinate endpoint patching activities and support vulnerability remediation and compliance initiatives.
• Develop and maintain operational reporting related to endpoint health, compliance, software deployment, and management activities.
• Act as a senior escalation point for complex endpoint issues, including troubleshooting, root cause investigation, and resolution of Tier 3 incidents.
• Partner with cybersecurity teams to identify and address endpoint security risks and strengthen device compliance.
• Support initiatives designed to modernize endpoint management and transition legacy processes toward cloud-based solutions.
• Work across IT teams, third-party providers, and business groups to deliver dependable and secure workplace technology services.
• Participate in onsite support or travel to regional locations when necessary, with travel up to ~25%.

Skills

Intune

SCCM/ConfigMgr

PowerShell

Active Directory

Group Policy

Troubleshooting

Education

Bachelor's degree in IT/CS/Eng

Tools

Windows Autopilot

SCCM (ConfigMgr)

Intune Admin Console

Job description

Cypress HCM is seeking an Endpoint Engineer to support a large enterprise desktop environment. This role focuses on reliable, secure, and standardized endpoint services, with automation, patching, device lifecycle management, and cloud transition initiatives.

The candidate will hands-on manage Windows devices, Intune, SCCM, Autopilot, Entra ID, and PowerShell automation, collaborate with security and IT teams, and travel up to 25% to regional locations as needed.