Senior Endpoint Management Engineer – Windows & macOS

Sprouts Farmers Market

Phoenix (AZ)

Hybrid

USD 110,000 - 150,000

Full time

3 hours ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Competitive pay

401(K) retirement plan with company •

Vacation accrual plan

Sick time plan

Flexible schedules

Employee Assistance Program (EAP)

15% discount for you and one other in‑

Company paid life insurance

DailyPay

Contests and appreciation events

Job summary

Sprouts Farmers Market is seeking a Systems Engineer III - Endpoint Management to manage Windows and macOS endpoints across corporate and retail fleets. You will deploy configuration, patching, and compliance via Intune, SCCM, Tanium, and Kandji.

You will partner with the Systems Engineering Supervisor and senior engineers on strategy, own build and rollout, and serve as escalation for the service desk in a hybrid role based in Phoenix with in‑office Tue–Thu presence.

Qualifications

Bachelor’s degree in Computer Science, Information Technology, or equivalent professional experience.
3+ years in endpoint engineering, systems engineering, or device management roles within an enterprise environment.
Hands‑on proficiency with Microsoft Intune, including configuration profiles, compliance policies, application deployment, and update rings.
Working experience with Microsoft Configuration Manager (SCCM/MECM) for software distribution, operating system deployment, or patch management.
Hands‑on experience with Windows Autopilot enrollment, including hardware hash collection, deployment profiles, and Enrollment Status Page configuration.
Proficiency in PowerShell for endpoint automation, scripting, and reporting; ability to write and troubleshoot scripts independently.
Working knowledge of Microsoft Entra ID, Conditional Access, and device compliance concepts.
Experience planning and executing patching or operating system upgrade campaigns across a distributed device fleet.
Familiarity with endpoint security frameworks such as CIS Benchmarks and standard patch management practices.
Strong problem‑solving and analytical skills, with the ability to clearly explain technical concepts to both technical and non‑technical audiences.

Responsibilities

Build, deploy, and maintain device configuration profiles, compliance policies, and security baselines across Windows and macOS using Microsoft Intune and Kandji.
Administer SCCM for the existing store and corporate Windows support the ongoing migration to Intune and Windows Autopilot.
Manage zero‑touch enrollment programs including Windows Autopilot and ABM/DEP; hardware hash management and enrollment status pages.
Own OS patching and feature update campaigns using Tanium and Intune update rings; design, pilot, rollout, and rollback planning.
Package, test, and deploy applications and updates across Windows and macOS using Tanium, Intune, Patch My PC, and Kandji.
Develop and maintain PowerShell automation for endpoint lifecycle tasks including remediation scripts and reporting.
Configure and maintain endpoint security controls including disk encryption, local admin management, certificate deployment, and CIS benchmarks.
Support Conditional Access and device compliance configuration within Microsoft Entra ID.
Diagnose and resolve escalated tier 3 endpoint incidents; perform root cause analysis and preventive fixes.
Create and maintain operational documentation and serve as escalation point for service desk and junior engineers.