Senior Endpoint Engineer

Jobtailor

Orlando (FL)

On-site

USD 140,000 - 190,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Trilon is seeking a senior endpoint architect to own and evolve the Windows and Apple enrollment, security, and lifecycle across a distributed enterprise. You will drive modernization, policy architecture, and cross-team coordination while delivering zero-touch deployment and AI-assisted automation.

You will lead implementation of Intune, Autopilot, Entra ID, and Apple Business Manager, partner with Cybersecurity, and deliver dashboards on enrollment, compliance, and device health.

Qualifications

7+ years of endpoint management, systems engineering, or modern workplace experience.
Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment.
Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture.
Enterprise software packaging and delivery experience, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations.
Experience with PowerShell App Deployment Toolkit (PSADT) strongly preferred.
Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation.
Patch My PC experience strongly preferred.
Advanced PowerShell skills and practical Microsoft Graph or other API experience.
Understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation.

Responsibilities

Serve as the senior technical owner and escalation point for Trilon’s workplace endpoint ecosystem.
Lead endpoint architecture, modernization, standards, and reliable operation across Windows, Apple devices, Microsoft Teams Rooms, and copier/plotter fleets.
Design and operate endpoint management through Microsoft Intune, Windows Autopilot, Windows Autopatch, Patch My PC, Microsoft Entra ID, Apple Business Manager, and related technologies.
Establish platform priorities, technical standards, service ownership, escalation coverage, roadmaps, documentation, change control, testing, rollback, and cross-training.
Own Windows and Apple enrollment, migration, configuration, compliance, security, application delivery, updates, lifecycle, and zero-touch deployment.
Develop PowerShell, Microsoft Graph, proactive-remediation, API-based, and governed AI-assisted automation.
Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation.
Develop dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation.

Skills

Endpoint Architecture

Leadership

Windows Intune

PowerShell

API Automation

Cross-Team Coordination

Communication

Tools

Microsoft Intune

Windows Autopilot

Microsoft Entra ID

Apple Business Manager

PowerShell App Deployment Toolkit

Microsoft Graph

Defender for Endpoint

BitLocker

Windows LAPS

Conditional Access

Patch My PC

Autodesk AutoCAD

Bentley products

Job description

Serve as the senior technical owner and escalation point for Trilon’s workplace endpoint ecosystem
Lead endpoint architecture, modernization, standards, and reliable operation across Windows, Apple devices, Microsoft Teams Rooms, and copier/plotter fleets
Design and operate endpoint management through Microsoft Intune, Windows Autopilot, Windows Autopatch, Patch My PC, Microsoft Entra ID, Apple Business Manager, and related technologies
Establish platform priorities, technical standards, service ownership, escalation coverage, roadmaps, documentation, change control, testing, rollback, and cross-training
Define Windows endpoint configuration profiles, security baselines, compliance policies, assignment groups, role-based access, and policy exceptions
Own Windows and Apple enrollment, migration, configuration, compliance, security, application delivery, updates, lifecycle, and zero-touch deployment
Own Intune application packaging, third-party patching, deployment models, remediation, and retirement
Develop PowerShell, Microsoft Graph, proactive-remediation, API-based, and governed AI-assisted automation
Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
Develop dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation
Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
Set standards for hardware models, warranties, leasing, refresh, recovery, reuse, retirement, and secure disposition
Own architecture, lifecycle, monitoring, documentation, and vendor coordination for Microsoft Teams Rooms
Govern Trilon’s copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, usage, and service metrics
Lead endpoint discovery, planning, and migration for newly acquired firms
Partner with Service Delivery and Field Support on onboarding, offboarding, office openings, relocations, refresh events, and escalations
Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

Requirements

7 or more years of endpoint management, systems engineering, or modern workplace experience
Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
Demonstrated technical leadership, sound judgment, influence, standards-setting, cross-team coordination, and clear communication without formal reporting authority
Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture
Enterprise software packaging and delivery experience, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
Experience with PowerShell App Deployment Toolkit (PSADT) strongly preferred
Experience with Windows Autopatch or equivalent update-ring governance and third-party application and patch automation
Patch My PC experience strongly preferred
Advanced PowerShell skills and practical Microsoft Graph or other API experience
Understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
Experience supporting complex distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
Ability to reconcile data across device-management, identity, asset, remote-support, and service-management systems
Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
Experience engineering or governing Microsoft Teams Rooms strongly preferred
Experience governing an enterprise copier, printer, or plotter fleet preferred
Experience with endpoint equipment warehousing and depot operations preferred
Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, preferred

Core Competencies

Demonstrates extensive expertise in endpoint management and architecture, particularly with Microsoft Intune, Windows Autopilot, and Apple Business Manager. Proven ability to lead technical initiatives, establish standards, and ensure compliance across diverse endpoint ecosystems.

Highest-signal resume keywords