Senior Endpoint Management Engineer (Temporary)

Virbiotechnologyinc; San Francisco (CA); On-site; USD 150,000 - 200,000; Full time

Job summary

Vir Biotechnology, Inc. is seeking a senior, hands-on endpoint management expert to own and optimize our modern endpoint environment.

You will manage Microsoft Intune, Windows Autopilot, Automox, Microsoft 365, Entra ID, and device lifecycle processes for a diverse US-based workforce. This role emphasizes troubleshooting complex endpoint issues, automating repetitive tasks with PowerShell and Microsoft Graph, and building durable runbooks and documentation for IT Operations and Service Desk

Qualifications

• 5+ years of experience in endpoint management, modern workplace engineering, systems administration, infrastructure operations, or a related role.
• Strong hands-on experience with Microsoft Intune and Windows endpoint management.
• Experience with Windows Autopilot, device enrollment, application deployment, compliance policies, and endpoint troubleshooting.
• Experience with Automox or another enterprise patch management platform.
• Working knowledge of Microsoft 365, Entra ID, endpoint security, device identity, access controls, and user/device lifecycle processes.
• Ability to script and automate with PowerShell; Microsoft Graph experience is a strong plus.
• Strong troubleshooting, documentation, communication, and ownership skills.

Responsibilities

• Microsoft Intune administration, including configuration profiles, compliance policies, app deployments, enrollment, reporting, and troubleshooting.
• Windows Autopilot provisioning, device enrollment, endpoint standards, rebuilds, refreshes, and lifecycle processes.
• Automox patch management, including patch policy design, compliance tracking, failed patch remediation, Worklets, reporting, and exception handling.
• Endpoint security controls, including security baselines, Vir security tools, Conditional Access dependencies, local admin controls, and secure configuration standards.
• Microsoft 365 and Entra ID tasks tied to endpoint operations, including device identity, groups, licensing, access, and user/device lifecycle administration.
• PowerShell and Microsoft Graph automation to reduce manual effort, improve visibility, and fix recurring endpoint issues at scale.
• Operational documentation, runbooks, support guides, reporting, and repeatable processes for IT Operations and Service Desk teams.
• Own Microsoft Intune as the primary endpoint management platform for Windows and macOS endpoints.
• Design, implement, troubleshoot, and continuously improve device enrollment, Windows Autopilot, configuration profiles, compliance policies, security baselines, application deployments, update rings, device restrictions, and endpoint lifecycle workflows.
• Serve as the escalation point for complex Intune, Autopilot, enrollment, policy, application deployment, compliance, and device configuration issues.
• Develop a clean, scalable endpoint architecture that minimizes drift, reduces one-off exceptions, and supports consistent configuration across the fleet.
• Create and maintain device standards for provisioning, rebuilds, refreshes, remote support, decommissioning, and secure disposal.
• Use reporting, dashboards, and operational review cycles to identify compliance gaps, failed deployments, device health issues, and recurring endpoint problems.
• Translate business needs into endpoint management policies that are secure, supportable, and user‑conscious.

Skills

Intune

Endpoint management

PowerShell

Microsoft Graph

Automox

Entra ID

Microsoft 365

Job description

Vir Biotechnology, Inc. is a clinical-stage biopharmaceutical company focused on powering the immune system to transform lives by discovering and developing medicines for serious infectious diseases and cancer. Its clinical-stage portfolio includes programs for chronic hepatitis delta and multiple PRO-XTEN® dual-masked T-cell engagers across validated targets in solid tumor indications. Vir Biotechnology also has a preclinical portfolio of programs across a range of infectious diseases and oncologic malignancies.

Vir Biotechnology has exclusive rights to the universal PRO-XTEN®masking platform for oncology and infectious disease. PRO-XTEN®is a trademark of Amunix Pharmaceuticals, Inc., a Sanofi company.

We believe the success of our colleagues drives the success of our mission. We are committed to creating a company where everyone feels supported and encouraged to give their best.

THE OPPORTUNITY

We need a senior, hands-on endpoint management expert who can take ownership of our modern endpoint environment immediately. This role will lead the day-to-day administration and ongoing improvement of Microsoft Intune, Windows Autopilot, Automox, Microsoft 365, Entra ID, patch compliance, endpoint security, automation, and device lifecycle management.

This is not a basic desktop support role. We are looking for someone who can troubleshoot complex endpoint issues, clean up inconsistent configurations, improve patch and compliance reporting, automate repetitive work, and build durable processes that reduce support burden and improve the user experience.

WHAT YOU'LL DO

• Microsoft Intune administration, including configuration profiles, compliance policies, app deployments, enrollment, reporting, and troubleshooting.
• Windows Autopilot provisioning, device enrollment, endpoint standards, rebuilds, refreshes, and lifecycle processes.
• Automox patch management, including patch policy design, compliance tracking, failed patch remediation, Worklets, reporting, and exception handling.
• Endpoint security controls, including security baselines, Vir security tools, Conditional Access dependencies, local admin controls, and secure configuration standards.
• Microsoft 365 and Entra ID tasks tied to endpoint operations, including device identity, groups, licensing, access, and user/device lifecycle administration.
• PowerShell and Microsoft Graph automation to reduce manual effort, improve visibility, and fix recurring endpoint issues at scale.
• Operational documentation, runbooks, support guides, reporting, and repeatable processes for IT Operations and Service Desk teams.
• Own Microsoft Intune as the primary endpoint management platform for Windows and macOS endpoints.
• Design, implement, troubleshoot, and continuously improve device enrollment, Windows Autopilot, configuration profiles, compliance policies, security baselines, application deployments, update rings, device restrictions, and endpoint lifecycle workflows.
• Serve as the escalation point for complex Intune, Autopilot, enrollment, policy, application deployment, compliance, and device configuration issues.
• Develop a clean, scalable endpoint architecture that minimizes drift, reduces one-off exceptions, and supports consistent configuration across the fleet.
• Create and maintain device standards for provisioning, rebuilds, refreshes, remote support, decommissioning, and secure disposal.
• Use reporting, dashboards, and operational review cycles to identify compliance gaps, failed deployments, device health issues, and recurring endpoint problems.
• Translate business needs into endpoint management policies that are secure, supportable, and user‑conscious.

WHO YOU ARE AND WHAT YOU BRING

• 5+ years of experience in endpoint management, modern workplace engineering, systems administration, infrastructure operations, or a related role.
• Strong hands‑on experience with Microsoft Intune and Windows endpoint management.
• Experience with Windows Autopilot, device enrollment, application deployment, compliance policies, and endpoint troubleshooting.
• Experience with Automox or another enterprise patch management platform.
• Working knowledge of Microsoft 365, Entra ID, endpoint security, device identity, access controls, and user/device lifecycle processes.
• Ability to script and automate with PowerShell; Microsoft Graph experience is a strong plus.
• Strong troubleshooting, documentation, communication, and ownership skills.

Applicants must currently be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

All employment decisions at Vir Biotechnology are based on legitimate, non‑discriminatory business requirements, job duties and individual qualifications. Employment decisions are made without regard to any legally protected characteristics.

This commitment extends to all management practices and decisions, including recruitment and hiring, compensation, appraisal systems, promotions, training and career development programs. Vir Biotechnology also strongly commits to providing employees with a work environment free of unlawful conduct or harassment.

Vir Biotechnology Human Resources leads recruitment and employment for Vir Biotechnology. Unsolicited resumes sent to the company from recruiters do not constitute any type of relationship between the recruiter and Vir Biotechnology and do not obligate us to pay fees should we hire from those resumes. We ask that external recruiters and/or agencies not contact or present candidates directly to our hiring manager or employees.

For hires based in the United States, Vir Biotechnology, participates in E-Verify.

Candidate Privacy Notice