Senior IT & MDM Engineer—Intune & Endpoint Security

PowerSchool Group LLC

Dallas (TX)

On-site

USD 120,000 - 170,000

Full time

6 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Comprehensive Insurance Coverage

401(k) plan with match

Parental Leave

Job summary

PowerSchool is seeking a Senior MDM Engineer to lead enterprise device management strategy end-to-end, focusing on Windows, macOS, and mobile devices. The role centers on security, compliance, lifecycle management, and provisioning using Intune, Automox, and Autopilot across a global enterprise.

You will own OS validation, deployment tooling, and policy enforcement while coordinating with IT teams on identity, access, and VDI activities. Strong leadership and hands-on expertise are essential.

Qualifications

Bachelor of Science in Computer Science, Information Technology, or a related field.
6-10 years of experience in Systems Engineering, Endpoint Engineering, or a similar role
Hands-on experience with Microsoft Intune (device management, application deployment, compliance policies)
Strong knowledge of Windows and macOS administration
Experience with Azure AD / Entra ID, device identity, and access management
Solid understanding of endpoint lifecycle management and ITSM processes
Experience troubleshooting enterprise-level system and device issues
Experience patching endpoints via Automox and Intune, with working knowledge of OS hardening methods for macOS and Windows

Responsibilities

Own end-to-end strategy, architecture, and execution for enterprise device management using Microsoft Intune and related technologies
Serve as the primary subject matter expert and accountable owner for endpoint compliance, security posture, and lifecycle governance across the organization
Manage and optimize the full device lifecycle — provisioning, enrollment, compliance, patching, and retirement — for all employee devices
Develop and maintain configuration profiles, compliance policies, and application deployment strategies
Own and oversee planning, execution, coordination, and delivery across supporting administrators and technicians
Own complex MDM and patching initiatives end-to-end, including the rollout of new solutions such as PAM, RBAC, and other enterprise toolsets
Serve as the point person for new toolset rollouts, including permission elevation tools and RMM platforms
Own complete OS validation processes for MDM, patching, and compliance ahead of major OS architecture changes — assessing compatibility, testing enrollment and policy behavior, and certifying readiness before enterprise-wide rollout
Engineer and support core endpoint platforms across Windows, macOS, and mobile devices
Own the organization's virtual desktop infrastructure (VDI), including provisioning, deprovisioning, operational management, and overall service health
Manage vendor relationships and coordinate strategic planning for long-term platform sustainability across MDM and VDI environments
Partner with infrastructure teams on identity (Entra ID/Azure AD), access, and conditional access policies
Monitor system health and performance, proactively identifying and resolving issues
Maintain documentation for system configurations, standards, and processes
Lead the definition and enforcement of enterprise hardware and asset standards that ensure ongoing MDM compliance and compatibility across the device fleet
Align hardware and vendor selection decisions with MDM platform requirements, ensuring new devices meet compatibility, compliance, and Autopilot registration standards before deployment
Own the process ensuring all new endpoints are properly registered and provisioned through Autopilot, partnering with vendors to streamline registration at time of purchase
Evaluate emerging endpoint technologies and market trends; make recommendations on hardware selection and standards for the organization
Influence enterprise-wide technology decisions through advanced technical expertise and market awareness
Automate endpoint deployment and management processes (Autopilot, scripting, policy automation)
Improve system efficiency by reducing manual processes and standardizing configurations across the endpoint environment
Drive enterprise-wide initiatives focused on IT automation and workflow optimization
Provide technical leadership on major enterprise initiatives, coordinating and directing the work of other administrators and technicians on cross-functional projects
Serve as the Tier 3 escalation point for complex endpoint and system issues
Collaborate with Service Desk and regional IT teams on incident resolution and root cause analysis
Participate in on-call or critical incident response as needed
Serve as technical leader for lower-level administrators and technicians, providing assistance with projects, processes, and solution development
Define and execute enterprise-wide endpoint security and compliance strategy, including remediation efforts across all devices
Implement endpoint security controls aligned with enterprise security standards
Manage endpoint patching across Automox and Intune, ensuring consistent, timely patch compliance across all managed devices
Apply OS hardening standards and best practices for both macOS and Windows to reduce attack surface and meet enterprise security baselines
Support compliance initiatives through policy enforcement and device posture management
Partner with InfoSec on risk mitigation and vulnerability management