Senior Endpoint Engineer

NLB Services; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

Next Level Business Services, Inc. is seeking a Senior Endpoint Engineer to design, implement, and support enterprise endpoint computing across Intune, SCCM/MECM, AVD, Windows 10/11, AD, and GPOs.

You will lead endpoint engineering initiatives and act as a senior escalation point for End User Computing. The role requires 8+ years of IT infrastructure experience and 5+ years designing Intune solutions, with strong packaging, patch management, and security skills.

Qualifications

• Bachelor’s degree in a relevant IT field.
• 8+ years IT infrastructure and endpoint engineering experience.
• 5+ years designing Microsoft Intune solutions.
• Experience in enterprise Windows environments.

Responsibilities

• Drive endpoint engineering roadmap initiatives and ensure high-quality delivery.
• Provide technical guidance for endpoint engineering and End User Computing.
• Serve as last-tier escalation point for Desktop Operations and End User Computing issues.
• Perform root cause analysis and develop preventative solutions for recurring endpoint issues.
• Design and implement enterprise endpoint solutions with cross-functional engineering teams.
• Manage Azure Virtual Desktop (AVD) environments: image creation, VM deployment, configuration, and monitoring.
• Design and maintain automated software deployment, patching, updates, and workstation imaging.
• Engineer, maintain, and support Windows desktop images and device lifecycle.
• Implement Intune policies for deployment, device compliance, and security configurations.
• Collaborate with AD and infrastructure teams to align GPOs with enterprise standards.

Skills

Intune management

SCCM/MECM

AD & GPO

Windows 10/11 engineering

Endpoint security

Packaging & deployment

Patch management

Windows Update for Business

Education

Bachelor’s degree

Tools

InstallShield

Azure Virtual Desktop (AVD)

Group Policy Management

Job description

Open Locations: Alpharetta, GA; Charlotte, NC; Chicago, IL; Conshohocken, PA; Denver, CO; Fargo, ND; Garden City, NY; Houston, TX; Lubbock, TX; Morristown, NJ; Mt. Juliet, TN; New York, NY; Purchase, NY; Topeka, KS

Role Summary

We are seeking a Senior Endpoint Engineer to design, engineer, and support enterprise endpoint computing solutions across Microsoft Intune, Microsoft Endpoint Configuration Manager (SCCM/MECM), Azure Virtual Desktop (AVD), Windows 10/11, Active Directory, Group Policy, and endpoint security platforms.

The ideal candidate will have strong enterprise endpoint engineering experience with a focus on Intune, SCCM/MECM, GPO management, Windows 11, AVD, application packaging, patch management, and endpoint security. This role will serve as a senior technical escalation point for End User Computing and Desktop Operations teams.

Key Responsibilities

• Drive endpoint engineering roadmap initiatives and ensure timely, high-quality delivery.
• Provide technical guidance and direction for endpoint engineering and End User Computing initiatives.
• Serve as a last-tier escalation point for Desktop Operations and End User Computing issues.
• Perform root cause analysis and develop preventative solutions for recurring endpoint issues.
• Design and implement enterprise endpoint solutions in collaboration with cross-functional engineering teams.
• Manage and support Azure Virtual Desktop (AVD) environments, including image creation, VM deployment, configuration, and performance monitoring.
• Design and maintain automated solutions for software deployment, application patching, updates, and workstation imaging.
• Engineer, maintain, and support multiple Windows desktop images.
• Manage the complete lifecycle of enterprise-standard desktop and laptop models.
• Design, implement, and maintain Microsoft Intune solutions based on business and end-user requirements.
• Create and manage Intune policies for application deployment, device compliance, and security configurations.
• Integrate Intune solutions with Microsoft 365 services.
• Design and implement Windows 11 provisioning using Microsoft Intune Autopilot.
• Configure and manage Windows Update for Business policies.
• Design and manage Active Directory Group Policy Objects (GPOs) to enforce security and configuration standards.
• Collaborate with Active Directory and infrastructure teams to ensure GPO alignment with enterprise standards.
• Implement endpoint security and compliance controls within Intune.
• Maintain desktop images and modify SCCM/MECM task sequences as required.
• Package, test, validate, and deploy enterprise applications.
• Maintain endpoint engineering documentation, knowledge-base articles, and support procedures.
• Maintain and expand the End User Computing knowledge base.
• Support continuous improvement and optimization of enterprise endpoint services.

Must-Have Skills

• Microsoft Intune – 5+ years
• SCCM / Microsoft Endpoint Configuration Manager (MECM)
• Active Directory & Group Policy (GPO)
• Windows 10/11 Endpoint Engineering
• Endpoint security and protection
• Application packaging and deployment
• Patch management
• Windows Update for Business

Technical Qualifications

• 8+ years of IT infrastructure and endpoint engineering experience.
• 5+ years designing and implementing Microsoft Intune solutions.
• 5+ years of systems engineering experience in complex enterprise environments.
• Strong enterprise desktop engineering and endpoint support experience.
• Proven experience with Windows 11, Active Directory, and Group Policy management.
• Experience developing and testing software packages using InstallShield or equivalent packaging technologies.
• Experience managing VDI environments, preferably Azure Virtual Desktop (AVD).
• Expert-level experience with endpoint protection engineering and security controls.
• Advanced expertise with Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune.
• Strong knowledge of patch management, including BIOS, firmware, operating system, and application updates.
• Basic knowledge of Microsoft SQL Server/database administration.

General Qualifications

• Excellent written and verbal communication skills.
• Strong analytical, organizational, and problem-solving abilities.
• Ability to manage multiple priorities in a fast-paced enterprise environment.
• Strong collaboration and stakeholder-management skills.
• Ability to work independently while contributing effectively to a technical team.
• Commitment to continuous learning and professional development.

Education

• Bachelor’s degree from an accredited college or university.

Mohd Abid Rafie

Next Level Business Services, Inc.