Senior Endpoint Engineer

Trilon Group; Sanford (FL); On-site; USD 130,000 - 175,000; Full time

Job summary

Jobtailor is seeking a hands-on technical leader to own enterprise endpoint platforms. You will define architecture, standards, and a roadmap for Windows, macOS, and mobility, guiding cross-functional teams and coordinating with cybersecurity.

This role requires deep experience with Microsoft Intune, Windows Autopilot, Entra ID, and end-user device lifecycle. You will build automation, dashboards, and testing protocols while ensuring security, compliance, and seamless onboarding across the

Qualifications

• 7+ years in endpoint management, systems engineering, or modern workplace roles.
• Hands-on experience managing thousands of endpoints via Intune/Autopilot in a distributed enterprise.
• Demonstrated technical leadership and influence without formal authority.
• Expert-level experience with Intune, Autopilot, Entra ID device management, Windows 11.
• Experience with Win32 packaging, detection logic, dependencies, and deployments.
• Advanced PowerShell skills; experience with Microsoft Graph and APIs.
• Strong Defender for Endpoint, BitLocker, Windows LAPS, CA, and vulnerability remediation knowledge.
• Experience supporting distributed environments during mergers or migrations.
• Experience reconciling data across device-management, identity, asset systems.
• Packaging and deploying complex AEC applications (Autodesk AutoCAD, Bentley).

Responsibilities

• Lead endpoint management architecture and platform standards.
• Own enrollment, deployment, and lifecycle workflows for Intune/Autopilot.
• Develop dashboards for enrollment, compliance, and patch posture.
• Coordinate with Cybersecurity on Defender for Endpoint and security controls.
• Mentor teams and transfer knowledge across the enterprise.

Skills

Technical leadership

Cross-functional collaboration

Communication with stakeholders

PowerShell scripting

Microsoft Intune expertise

Windows Autopilot

Microsoft Entra ID

Endpoint security awareness

Change management

Project documentation

Tools

Microsoft Graph

Patch My PC

Apple Business Manager

Microsoft Defender for Endpoint

BitLocker

Windows LAPS

Azure AD

Job description

• Provide hands-on technical leadership, architecture, design review, and guidance for endpoint platforms
• Establish platform priorities, technical standards, escalation coverage, and an enterprise endpoint roadmap
• Serve as technical authority and senior escalation point for enterprise endpoint management
• Own endpoint engineering documentation, change control, testing, rollback standards, support handoffs, knowledge transfer, and cross-training
• Define and maintain Windows endpoint configuration, security, compliance, access, and policy standards
• Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre-provisioning, reset, and redeployment workflows
• Design Microsoft Entra join, hybrid join, MDM enrollment, and legacy-device migration patterns
• Manage Mac, iPhone, and iPad platforms through Microsoft Intune and Apple Business Manager
• Own application packaging and delivery through Intune, including Win32 packages, PSADT, detection rules, dependencies, testing, remediation, and retirement
• Use Patch My PC to publish and maintain third-party and specialized applications
• Develop delivery patterns for large AEC applications including Autodesk AutoCAD and Bentley products
• Manage Windows Autopatch and update-ring strategies and remediate failed installations and exceptions
• Build PowerShell, Microsoft Graph, proactive-remediation, API-based, and governed AI-assisted automation
• Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation
• Develop dashboards and reports for enrollment, compliance, encryption, patch posture, deployment success, device health, and remediation performance
• Maintain authoritative endpoint inventory across identity, device-management, service-management, procurement, and vendor systems
• Set endpoint hardware lifecycle, refresh, recovery, reuse, retirement, and secure-disposition standards
• Own Microsoft Teams Rooms architecture, management, monitoring, updates, licensing dependencies, and escalation paths
• Govern the enterprise copier and plotter fleet, including standards, vendors, configuration, lifecycle, inventory, and service metrics
• Lead endpoint discovery, assessment, planning, and migration for newly acquired firms
• Partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations
• Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders

Requirements

• 7 or more years of endpoint management, systems engineering, or modern workplace experience
• Hands-on responsibility managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment
• Demonstrated technical leadership and ability to influence technical peers without formal reporting authority
• Expert-level experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture
• Experience with enterprise software packaging and delivery, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations
• Advanced PowerShell skills and practical experience using Microsoft Graph or other APIs
• Strong understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation
• Experience supporting distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions
• Experience reconciling data across device-management, identity, asset, remote-support, and service-management systems
• Experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement
• Hands-on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred
• Experience governing an enterprise copier, printer, or plotter fleet is preferred
• Experience with endpoint equipment warehousing and depot operations is preferred
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, is preferred
• No educational credential is specified

Core Competencies

Demonstrates extensive expertise in endpoint management, including Microsoft Intune, Windows Autopilot, and endpoint policy architecture. Capable of providing technical leadership and managing complex endpoint environments while ensuring compliance and security standards are met.

Highest-signal resume keywords

• Microsoft Intune Management
• Windows Autopilot Deployment
• Endpoint Policy Architecture
• Advanced PowerShell Skills
• Microsoft Entra ID Device Management

Hard Skills

• Endpoint Management
• Systems Engineering
• Enterprise Software Packaging
• Windows 11 Configuration
• Application Delivery
• Vulnerability Remediation
• Data Reconciliation
• Hardware Lifecycle Management
• AEC Application Packaging
• Endpoint Operations Support

Soft Skills

• Technical Leadership
• Influencing Technical Peers
• Communication with Stakeholders

Industry Keywords

• Endpoint Security
• Compliance Standards
• Distributed Enterprise Environment
• Asset Governance
• Mergers and Acquisitions

Tools & Technologies

• Microsoft Graph
• Microsoft Defender for Endpoint
• BitLocker
• Windows LAPS
• Apple Business Manager
• Patch My PC
• Microsoft Teams Rooms