Senior Endpoint Engineer

Kwik Trip, Inc.; La Crosse (WI); On-site; USD 90,000 - 120,000; Full time

Job summary

Kwik Trip, Inc. is seeking an experienced IT Endpoint Engineer 3 to guide the enterprise endpoint environment.

You will lead administration, security remediation efforts, deployment validation, automation, and provide advanced support across Windows and mobile device management platforms. You will collaborate with IT Security, Desktop Support, Service Desk, vendors, and partners to ensure endpoint reliability, security, and performance while developing roadmaps and technical documentation for

Qualifications

• Associate degree in Information Systems or a related field.
• 4–6 years of experience with SCCM/MECM, Microsoft Intune, SQL, and PowerShell.
• 6+ years of experience supporting Windows operating systems and desktop technologies.
• Advanced experience administering enterprise endpoint management platforms.

Responsibilities

• Lead administration and optimization of enterprise endpoint management platforms (SCCM/MECM, Intune, Workspace ONE).
• Maintain and improve SCCM/MECM infrastructure health, performance, and reliability.
• Design and implement next-generation endpoint management solutions and automation scripts.
• Coordinate deployments, updates, and remediation activities with IT teams and vendors.
• Develop and maintain documentation, reports, and roadmaps for endpoint services.

Skills

Endpoint management

Windows OS

Active Directory

Azure AD

Group Policy

PowerShell

Automation

Vulnerability remediation

Education

Associate degree in Information Systems

Bachelor's degree (preferred) in Information Systems

Tools

SCCM/MECM

Intune

Workspace ONE

Apple Business Manager

Google Enterprise Console

SQL

PowerShell

Job description

*This position is not eligible for sponsorship

Job Type: Full-time

About the Role

Kwik Trip is seeking an experienced IT Endpoint Engineer 3 to lead the administration, optimization, and future direction of our enterprise endpoint environment. In this role, you will serve as a senior technical resource responsible for endpoint management platforms, security remediation efforts, deployment validation, automation, and advanced support. You will collaborate closely with IT Security, Desktop Support, Service Desk teams, vendors, and technology partners to ensure the reliability, security, and performance of endpoint services across the organization.

What You'll Do

• Lead administration and optimization of enterprise endpoint management platforms, including SCCM/MECM, Microsoft Intune, Workspace ONE, Apple Business Manager, and Google Enterprise Console.
• Maintain and improve SCCM/MECM infrastructure health, performance, and reliability.
• Maintain and optimize our existing SCCM/MECM environment while helping evaluate, design, and implement the next generation of unified endpoint management solutions.
• Evaluate, design, and support next-generation unified endpoint management solutions.
• Create, update, test, and validate software packages, operating system images, drivers, policies, and endpoint configurations.
• Coordinate and validate endpoint deployments, updates, and remediation activities to ensure successful implementation.
• Partner with IT Security to execute vulnerability remediation and endpoint security initiatives.
• Develop and maintain PowerShell scripts, automation solutions, custom reports, and operational tools that improve efficiency.
• Monitor endpoint analytics, compliance reporting, deployment success rates, and inventory data.
• Provide third-level escalation support for complex endpoint, hardware, software, networking, and device management issues.
• Serve as a technical expert for endpoint technologies and enterprise device management best practices.
• Research, recommend, and implement improvements that enhance scalability, reliability, and operational effectiveness.
• Develop and maintain technology roadmaps for Windows, MECM/SCCM, and related endpoint management platforms.
• Create and maintain technical documentation and knowledge base resources.
• Provide guidance, training, and support to Endpoint Administrator/Engineer 1 and 2 roles as needed.
• Collaborate with vendors and cross-functional IT teams to plan and execute endpoint-related initiatives and changes.

What We're Looking For

• Associate degree in Information Systems or a related field, or an equivalent combination of education and hands‑on IT experience.
• 4 to 6 years of experience with SCCM/MECM, Microsoft Intune, SQL, and PowerShell.
• 6 or more years of experience supporting Windows operating systems, desktop technologies, and virtual environments.
• Advanced experience administering enterprise endpoint management platforms.
• Strong knowledge of:
• Windows operating systems
• Active Directory and Azure AD
• Group Policy Management
• DNS and DHCP
• Apple Business Manager
• Workspace ONE
• iOS, macOS, and Android device management
• Network infrastructure and virtual environments
• Strong analytical, troubleshooting, diagnostic, and problem‑solving skills.
• Excellent communication, customer service, documentation, and organizational abilities.
• Ability to manage multiple priorities and meet deadlines in a fast‑paced environment.
• Ability to work independently and collaboratively within a team setting.
• Strong attention to detail and commitment to operational excellence.

Even Better If You Have

• Bachelor's degree in Information Systems or a related field.
• ITIL certification.
• Experience leading enterprise endpoint security remediation efforts.
• Experience managing deployment approvals and large-scale endpoint changes.
• Experience developing endpoint technology roadmaps.
• Advanced experience creating automation, custom reporting, and operational efficiency improvements within MECM or similar platforms.