Senior Endpoint Engineer

Jobtailor; Neptune Township (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced Endpoint Engineering Leader to drive the architecture, deployment, and governance of enterprise endpoints across Windows, Mac, and mobile devices.

You will own Intune, Autopilot, and Entra ID workflows, while partnering with cybersecurity and IT leadership to ensure robust security, compliance, and scalable operations in a distributed enterprise.

Qualifications

• 7+ years in endpoint management, systems engineering, or modern workplace.
• Hands-on responsibility managing thousands of endpoints via Intune and Autopilot.
• Leadership and ability to influence peers without formal authority.
• Expert-level experience with Intune, Autopilot, Entra ID, Windows 11, and endpoint policy architecture.
• Experience packaging and delivering Win32 apps with testing and deployment rules.
• Experience with Windows Autopatch and update-ring governance.

Responsibilities

• Provide hands-on technical leadership, architecture, design review, and practical guidance for endpoint platforms.
• Establish platform priorities, service ownership, and executable roadmap.
• Serve as technical authority and senior escalation point for enterprise endpoint management.
• Own endpoint engineering documentation, change control, testing, rollback standards, and handoffs.
• Define and maintain Windows endpoint configuration profiles, security baselines, and policies.
• Own Intune and Windows Autopilot architecture, enrollment, deployment, and zero-touch workflows.
• Design Entra join patterns, automation, and legacy-device transition.
• Manage Mac/iPhone/iPad platforms via Intune and Apple Business Manager.
• Own application packaging and delivery in Intune, including Win32, PSADT, and detection logic.
• Use Patch My PC for third-party applications and updates.
• Develop delivery patterns for large AEC applications like AutoCAD and Bentley.
• Monitor update rings and remediate failures; govern Autopatch activities.
• Build PowerShell, Graph, API-based automation and governance.
• Partner with Cybersecurity on Defender, BitLocker, LAPS, CA, and vulnerability remediation.
• Develop dashboards on enrollment, compliance, encryption, and device health.
• Maintain authoritative endpoint inventory across systems.
• Set hardware lifecycle and secure-disposition standards.
• Oversee Teams Rooms architecture and lifecycle; coordinate with vendors.
• Govern copier/plotter fleets, with vendors, firmware, and service metrics.

Skills

Microsoft Intune

Windows Autopilot

Endpoint Management

PowerShell

Microsoft Entra ID

Tools

Patch My PC

Apple Business Manager

Microsoft Graph

Defender for Endpoint

Microsoft Teams Rooms

Job description

• Provide hands-on technical leadership, architecture, design review, and practical guidance for endpoint platforms
• Establish platform priorities, service ownership, technical standards, escalation coverage, and an executable roadmap
• Serve as technical authority and senior escalation point for enterprise endpoint management
• Own endpoint engineering documentation, change control, testing, rollback standards, support handoffs, knowledge transfer, and cross-training
• Define and maintain Windows endpoint configuration profiles, security baselines, compliance policies, assignment groups, role-based access, and policy exceptions
• Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre-provisioning, reset, redeployment, and zero-touch workflows
• Design Microsoft Entra join, hybrid Entra join, automatic MDM enrollment, and legacy-device transition patterns
• Manage Mac, iPhone, and iPad platforms through Microsoft Intune and Apple Business Manager
• Own application packaging and delivery in Intune, including Win32 packages, PSADT, detection rules, dependencies, supersedence, testing, assignments, remediation, and retirement
• Use Patch My PC to publish and maintain third-party and specialized applications
• Develop delivery patterns for large and specialized AEC applications, including Autodesk AutoCAD and Bentley products
• Manage Windows Autopatch and update-ring strategies; monitor results and remediate failures and exceptions
• Build PowerShell, Microsoft Graph, API-based, proactive-remediation, and governed AI-assisted automation
• Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
• Develop dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation
• Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
• Set endpoint hardware lifecycle, warranty, leasing, refresh, recovery, reuse, retirement, and secure-disposition standards
• Own Microsoft Teams Rooms architecture, standards, lifecycle, monitoring, documentation, vendor coordination, and escalation paths
• Govern Trilon's copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, usage, and service metrics
• Lead endpoint discovery, assessment, planning, and migration for newly acquired firms
• Define phased integration plans and partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations
• Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

Requirements

• 7 or more years of endpoint management, systems engineering, or modern workplace experience
• Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
• Demonstrated technical leadership and ability to influence technical peers without formal reporting authority
• Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture
• Enterprise software packaging and delivery experience, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
• Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation
• Advanced PowerShell skills and practical experience with Microsoft Graph or other APIs
• Understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
• Experience supporting distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
• Experience reconciling data across device-management, identity, asset, remote-support, and service-management systems
• Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
• Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred
• Experience governing an enterprise copier, printer, or plotter fleet is preferred
• Experience with endpoint equipment warehousing and depot operations is preferred
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, is preferred
• PSADT, Patch My PC, Microsoft Teams Rooms, copier/plotter fleet, depot operations, and AEC application experience are preferred where stated
• Individual-contributor technical-lead role; not a formal people-manager position

Core Competencies

Demonstrates extensive expertise in endpoint management, particularly with Microsoft Intune and Windows Autopilot, while providing technical leadership and architecture for enterprise environments. Proficient in managing complex application packaging, deployment, and compliance across diverse platforms, ensuring robust security and operational efficiency.

Highest-signal resume keywords

• Microsoft Intune
• Windows Autopilot
• Endpoint Management
• PowerShell
• Microsoft Entra ID

ATS Optimization Keywords

Hard Skills

• Endpoint Policy Architecture
• Enterprise Software Packaging
• Windows Autopatch
• Application Delivery
• Compliance Policies
• Security Baselines
• Change Control
• Automation
• Data Reconciliation
• Device Management

Soft Skills

• Technical Leadership
• Communication
• Influencing Peers

Industry Keywords

• Endpoint Security
• Vulnerability Remediation
• Hardware Lifecycle Management
• AEC Applications
• Distributed Environments

Tools & Technologies

• Microsoft Graph
• Patch My PC
• Apple Business Manager
• Microsoft Teams Rooms
• Defender for Endpoint