Senior Endpoint Client Engineer

SynapOne; Washington (District of Columbia); On-site; USD 120,000 - 150,000; Full time

Job summary

PCAOB is seeking a Senior Endpoint Client Engineer in the Office of Technology to lead enterprise endpoint management platforms across Windows, iOS, and Android. You will ensure security, reliability, and compliance while enabling end-user computing strategies.

The role requires deep expertise in Intune, MECM/SCCM, Autopilot, and device security, with strong scripting skills and experience in agile environments. Travel to Ashburn, VA or DC area may be required.

Qualifications

• Bachelor’s degree in computer science, IT, or related field, or equivalent practical experience.
• 7+ years of experience in endpoint engineering, systems administration, or enterprise endpoint operations.
• Deep experience administering Microsoft Intune in enterprise environments.
• Experience implementing Windows Autopilot provisioning and modern endpoint management strategies.
• Strong experience with MECM/SCCM for software deployment and patch management.
• Knowledge of Entra ID, CA policies, and device compliance.

Responsibilities

• Serve as a senior technical engineer for enterprise endpoint management platforms.
• Design, implement, and maintain endpoint management solutions for Windows, iOS, and Android.
• Perform lifecycle management: OS upgrades, packaging, deployment, patching, hardware refreshes.
• Administer enterprise MDM and MAM platforms.
• Manage endpoint compliance policies and security baselines.
• Implement modern device management capabilities like Windows Autopilot.
• Develop automated endpoint deployment, remediation, and reporting with PowerShell.
• Coordinate maintenance with business units, security, and infra teams.
• Monitor endpoint health, compliance metrics, and security posture.
• Participate in incident response, RCA, and remediation of endpoint issues.
• Develop runbooks and standard operating procedures.
• Provide guidance for endpoint security, vulnerability management, and end-user computing.

Skills

Endpoint engineering

Automation & scripting

Lifecycle management

Agile environment

Written & verbal communication

Education

Bachelor’s degree in computer science or information technology

Tools

Microsoft Intune

MECM/SCCM

Windows Autopilot

Apple Business Manager

MDM/MAM

Entra ID

PowerShell

Job description

The PCAOB has an opening for a Senior Endpoint Client Engineer in the Office of Technology (OT). This position is responsible for the design, implementation, administration, and third-level operational support of enterprise endpoint computing platforms and services. The role focuses on Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Windows Autopilot, Microsoft Defender for Endpoint, Microsoft Entra ID, Apple Business Manager, and modern endpoint security and management technologies. The position requires deep technical expertise in endpoint engineering, device security, automation, and lifecycle management to ensure the reliability, security, and compliance of enterprise endpoint environments. The successful candidate will serve as a senior technical resource supporting the PCAOB's end-user computing strategy and enterprise endpoint ecosystem.

Key Responsibilities

• Serve as a senior technical engineer for enterprise endpoint management platforms, ensuring availability, security, performance, and operational reliability.
• Design, implement, and maintain endpoint management solutions for Windows, iOS, and Android devices.
• Perform lifecycle management activities including operating system upgrades, software packaging and deployment, patching, hardware refreshes, and endpoint provisioning.
• Administer enterprise mobile device management (MDM) and mobile application management (MAM) platforms.
• Manage endpoint compliance policies, security baselines, configuration profiles, and enforcement controls.
• Implement and support modern device management capabilities, including Windows Autopilot and zero-touch provisioning.
• Develop and maintain automated endpoint deployment, configuration, remediation, and reporting processes utilizing PowerShell and other automation technologies.
• Coordinate endpoint-related maintenance and change activities with business units, application owners, security teams, and infrastructure teams.
• Monitor endpoint platform health, compliance metrics, and security posture; proactively identify and remediate operational and security risks.
• Participate in incident response, root cause analysis, troubleshooting, and remediation of endpoint-related issues.
• Develop, maintain, and follow operational runbooks, standards, and standard operating procedures.
• Provide technical guidance and operational support for endpoint security, device management, vulnerability management, and end-user computing initiatives.
• Participate in after-hours maintenance activities and troubleshooting events.
• Experience working in an agile environment.

Core Technologies

• Microsoft Intune Endpoint Management
• Windows Autopilot and Modern Device Provisioning
• Conditional Access and Device Compliance
• Apple Business Manager
• Endpoint Security and Vulnerability Management
• Endpoint Software Packaging and Deployment
• Endpoint Configuration and Compliance Management
• Mobile Device Management (MDM) and Mobile Application Management (MAM)
• Endpoint Analytics and Device Health Monitoring
• PowerShell Automation and Endpoint Orchestration

Qualifications

• Bachelor’s degree in computer science, Information Technology, or a related field, or equivalent practical experience.
• Minimum of 7+ years of experience in endpoint engineering, systems administration, or enterprise endpoint operations in a corporate or enterprise IT environment.
• In-depth knowledge and hands-on experience administering Microsoft Intune in enterprise environments, including device enrollment, compliance policies, application deployment, endpoint security management, and reporting.
• Demonstrated experience implementing and supporting Windows Autopilot provisioning and modern endpoint management strategies.
• Strong hands-on experience administering Microsoft Configuration Manager (MECM/SCCM) for software deployment, operating system deployment, patch management, and endpoint administration.
• Strong understanding of Microsoft Entra ID device registration, hybrid identity environments, Conditional Access policies, and compliance enforcement.
• Experience administering Apple Business Manager and enterprise Apple device enrollment programs.
• Strong experience managing Windows 11 enterprise environments, endpoint security configurations, and device lifecycle management.
• Knowledge of Zero Trust security principles as applied to endpoint management and device security.
• Experience creating scripts and automation solutions using PowerShell or similar technologies.
• Thorough understanding of endpoint compliance, vulnerability management, patch management, and security best practices.
• Proven ability to troubleshoot complex endpoint issues spanning operating systems, applications, identity services, security controls, and device management platforms.
• Experience working within change management, incident management, and agile environments.
• Strong written and verbal communication skills with the ability to collaborate across technical and non-technical teams.
• Travel to Ashburn, VA, Washington, DC, or other regional offices as required.