Senior Endpoint Engineer (Applications)

The AES Corporation; Indianapolis (IN); On-site; USD 80,000 - 120,000; Full time

Job summary

The AES Corporation is seeking a Senior System Engineer in Indianapolis, Indiana to take end-to-end ownership of endpoint engineering and enhance the Microsoft Intune environment. The ideal candidate will have over 5 years of experience in endpoint engineering, strong skills in Microsoft Intune, and proficiency in PowerShell scripting. Responsibilities include managing device configurations, security compliance, and troubleshooting complex issues. Join a team dedicated to advancing a modern endpoint experience.

Qualifications

• 5+ years in Endpoint Engineering / EUC / Desktop Engineering.
• Strong hands-on experience with Microsoft Intune, conditional access, and endpoint security.
• Experience with application packaging and tier-3 troubleshooting.

Responsibilities

• Administer and enhance the Microsoft Intune environment.
• Design and support device configuration and compliance policies.
• Drive improvements in endpoint security posture.

Skills

Endpoint Engineering

Microsoft Intune

Windows 11 management

PowerShell

VMware Horizon

Job description

You Are Perfect for This Position If You Have:

• End-to-End Ownership Mentality – You think beyond “device management” and take ownership of the full digital workplace experience.
• Modern Endpoint Mindset – You understand how Intune, Conditional Access, app protection, and identity all work together.
• Engineering + Operations Balance – You can handle escalations while also building scalable, long-term solutions.
• Curiosity & Initiative – You don’t just fix issues, you improve systems.

What You’ll Do

As a Senior System Engineer, you will play a key role in shaping and supporting our modern endpoint environment:

Endpoint & Intune Engineering

• Administer and enhance our Microsoft Intune environment across Windows, iOS, and Android.
• Design and support device configuration and compliance policies.
• Design and support App Protection Policies (MAM).
• Design and support Conditional Access integrations and enforcement.
• Support device enrollment strategies, including corporate and BYOD scenarios.
• Drive improvements in endpoint security posture aligned with data protection initiatives.
• Act as a Tier 3 escalation point for complex endpoint, identity, and application issues.
• Troubleshoot device compliance and access issues.
• Troubleshoot Intune policy conflicts and deployment failures.
• Troubleshoot authentication and Conditional Access challenges.
• Troubleshoot application behavior across managed devices and VDI.
• Perform root cause analysis and implement long‑term fixes, not just workarounds.
• Package and deploy applications across Intune (Win32, MAM, mobile apps).
• Evaluate new software requests and align delivery methods with security and architecture standards.
• Support the user‑facing side of our VMware Horizon environment: optimize FSLogix profiles and App Volumes, troubleshoot login performance, profile issues, and session experience.
• Partner with infrastructure teams that manage the back‑end platform.
• Develop PowerShell scripts and automation for endpoint management tasks, reporting and remediation, identify trends, and drive proactive improvements across the environment.

Security & Compliance Alignment

• Support initiatives around secure access and endpoint hardening.
• Integrate with Microsoft security tools and policies.
• Ensure endpoints align with organizational security and compliance standards.

What You’ll Need

• 5+ years in Endpoint Engineering / EUC / Desktop Engineering.
• Strong hands‑on experience with Microsoft Intune (required), conditional access and endpoint security integration, Windows 11 management in enterprise environments.
• Experience with application packaging (Intune Win32, SCCM, or similar) and tier‑3 endpoint troubleshooting.
• VDI experience, including VMware Horizon (user/session side), FSLogix (required), App Volumes (required), scripting experience (PowerShell) for automation and remediation.
• Working knowledge of Azure AD / Entra ID concepts; Microsoft 365 apps (especially in managed or VDI environments).

Nice to Have

• Experience with mobile platform management (iOS/Android work profiles).
• Endpoint analytics or advanced reporting.
• Exposure to Microsoft security ecosystem (Defender, Purview, etc.).