Senior Windows Endpoint Automation Engineer

The Vanguard Group; Wayne (PA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Vanguard seeks a Senior Windows Endpoint Engineer to lead automation across provisioning, compliance, remediation, and configuration for the Windows fleet. This role focuses on repeatable, safe, scalable patterns and strong observability.

You will implement Intune, SCCM/MECM, Windows Autopilot, and PowerShell-based frameworks, aligning OS baselines and security standards with enterprise needs. Expect collaboration with QA, CI/CD, and identity platforms.

Qualifications

• Eight years of related work experience.
• Undergraduate degree in a related field or equivalent experience.
• Sponsorship not offered for this position.

Responsibilities

• Lead endpoint automation for provisioning, compliance, remediation, and standard configuration across the Windows fleet.
• Engineer and modernize deployment workflows using Microsoft Intune, SCCM/MECM, and Windows Autopilot.
• Build reusable PowerShell-based frameworks for device configuration, drift detection, self-healing remediation, and operational consistency.
• Define and evolve Windows endpoint standards including OS baseline configuration, security baselines, and lifecycle practices.
• Partner with QA and release governance to improve validation practices for patches, feature updates, policy changes, security configuration, and application rollouts.
• Implement and expand CI/CD practices for endpoint engineering content, using Git-based workflows, reviews, and promotion patterns.
• Collaborate across Workplace Engineering to standardize engineering patterns and share automation approaches.

Skills

PowerShell

Windows endpoint engineering

CI/CD concepts

Git workflows

Automation

Troubleshooting

Documentation

Education

Undergraduate degree

Tools

Intune

SCCM/MECM

Windows Autopilot

Git

OS provisioning

Entra ID

Job description

Vanguard seeks a Senior Windows Endpoint Engineer to lead automation across provisioning, compliance, remediation, and configuration for the Windows fleet. This role focuses on repeatable, safe, scalable patterns and strong observability.

You will implement Intune, SCCM/MECM, Windows Autopilot, and PowerShell-based frameworks, aligning OS baselines and security standards with enterprise needs. Expect collaboration with QA, CI/CD, and identity platforms.