Senior Endpoint Engineer

ZENITH INFOTEK LLC; North Carolina; Hybrid; USD 120,000 - 170,000; Full time

Job summary

ZENITH INFOTEK LLC is seeking a Senior Endpoint Engineer to design, engineer, and support enterprise endpoint solutions across Intune, AVD, Windows endpoints, and security platforms. The role emphasizes automation, lifecycle management, policy governance, and platform optimization to sustain a secure and productive end-user computing environment.

Responsibilities include roadmap delivery, cross-functional collaboration, and advanced support for the Desktop Operations team.

Qualifications

• 8+ years IT infrastructure and endpoint engineering experience.
• 5+ years designing and implementing Microsoft Intune solutions.
• Experience with Windows 11, Active Directory, and Group Policy management.
• Experience managing VDI environments, preferably Azure Virtual Desktop (AVD).
• Expert-level endpoint protection engineering and security controls.
• Expert knowledge of MECM and Microsoft Intune.
• Patch management experience including BIOS, firmware, OS, and apps.

Responsibilities

• Drive delivery of roadmap initiatives on schedule and with quality standards.
• Provide guidance and direction to carry out plans, ensuring schedule attainment and process adherence.
• Provide last tier support for operations, root cause and preventative analysis.
• Offer technical support for End User Computing and Endpoint Security.
• Collaborate with cross-functional teams to design and implement endpoint solutions.
• Manage the Azure Virtual Desktop (AVD) environment: images, VMs, monitoring.
• Develop automated deployment of software packages, patches, and images.
• Engineer and maintain Windows desktop images and lifecycle of devices.
• Design and implement Intune policies for deployment, compliance, and security.
• Ensure integration with Microsoft 365 services.
• Design Windows 11 provisioning with Intune Autopilot and update policies.
• Manage AD GPOs in alignment with security goals.
• Implement security/compliance policies in Intune and monitor incidents.
• Create documentation of Intune configurations and provisioning processes.
• Maintain and update SCCM task sequences and deployment pipelines.
• Package, test, and deploy enterprise applications.
• Maintain End User Computing knowledge base and support docs.

Skills

Communication

Analytical thinking

Organizational skills

Problem solving

Multitasking

Collaboration

Continuous learning

Independent work

Education

Bachelor's degree

Tools

Intune

SCCM

GPO

Azure Virtual Desktop (AVD)

Active Directory

Windows 11

MECM

SQL Server

Job description

Senior Endpoint Engineer

Hybrid – 3 days on-site

Location: Alpharetta, GA; Charlotte, NC; Chicago, IL; Conshohocken, PA; Denver, CO; Fargo, ND; Garden City, NY; Houston, TX; Lubbock, TX; Morristown, NJ; Mt Juliet, TN; New York, NY; Purchase, NY; Topeka, KS (need local resources from these locations)

MUST HAVE: Intune, SCCM Managing GPO, Windows & AVD Environment.

Need folks with good experience in Azure Virtual Desktop.

Other required skills are SCCM, Intune, GPO.

ROLE SUMMARY

Designs, engineers, and supports enterprise endpoint computing solutions across Microsoft Intune, Azure Virtual Desktop (AVD), Windows endpoints, and endpoint security platforms. Ensures secure, reliable, and efficient end-user computing services through automation, endpoint lifecycle management, policy governance, and platform optimization, enabling workforce productivity and maintaining a stable enterprise computing environment.

ROLE RESPONSIBILITIES

• Drive delivery of roadmap initiatives on schedule and in accordance with established quality standards.
• Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.
• Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.
• Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.
• Collaborate with cross-functional engineering teams to design and implement endpoint solutions.
• Manage the Azure Virtual Desktop (AVD) environment, including creating images, deploying virtual machines, monitor platform performance.
• Develop automated solutions for deploying software packages, application patches/updates and workstation images.
• Engineer, maintain, and support multiple Windows desktop images.
• Manage the entire lifecycle of our global standard desktop and laptop models.
• Design and implement Microsoft Intune solutions that meet end user requirements.
• Create and manage Intune policies for application deployment, device compliance, and security configurations.
• Ensure seamless integration with other Microsoft 365 services.
• Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.
• Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.
• Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.
• Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.
• Maintain desktop images and modify SCCM task sequences as needed.
• Package, test, validate, and deploy enterprise applications.
• Maintain and expand the End User Computing knowledge base.
• Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.

TECHNICAL QUALIFICATIONS

• 8+ years of IT infrastructure and endpoint engineering experience, including 5+ years designing and implementing Microsoft Intune solutions.
• 5+ years of systems engineering experience in a complex enterprise environment.
• Enterprise desktop engineering and endpoint support experience.
• Proven experience with Windows 11, Active Directory, and Group Policy management.
• Experience developing and testing software packages using InstallShield or equivalent packaging technologies.
• Experience managing VDI environments, preferably Azure Virtual Desktop (AVD).
• Expert-level experience in endpoint protection engineering and security controls.
• Advanced expertise with Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune.
• Expert knowledge of patch management, including BIOS, firmware, operating system, and application updates.
• Basic database administration knowledge, particularly Microsoft SQL Server.

GENERAL QUALIFICATIONS

• Excellent written and verbal communication skills.
• Strong analytical, organizational, and problem-solving abilities.
• Ability to manage multiple priorities in a fast-paced environment.
• Strong collaboration and stakeholder engagement skills.
• Demonstrated commitment to continuous learning and professional development.
• Ability to work independently while contributing effectively within a team environment.

EDUCATION REQUIREMENTS

• Bachelor’s degree from an accredited college or university.

Flexible work from home options available.