Senior Windows Endpoint Engineer

Brooksource; Detroit (MI); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k) with company match

Paid time off

Competitive benefits

Job summary

Brooksource is seeking a senior Windows endpoint engineer in Detroit to own the Windows workstation platform, including build standards, OS upgrades, packaging, and patching. You will lead modernization efforts from SCCM to Intune and contribute to observability and security tooling.

The role requires 8+ years in Windows endpoint engineering and hands-on experience with SCCM, Intune, Autopilot, and scripting. A strong collaboration mindset with security and infrastructure teams is expected.

Qualifications

• BS and 8+ years of Windows endpoint engineering, desktop platform, infrastructure operations, or equivalent experience.
• 7+ years of Windows OS, Microsoft endpoint management, packaging, deployment, and enterprise workstation support experience.
• Experience supporting large, distributed enterprise environments and partnering with field support or service desk organizations.
• Tanium experience preferred; experience with complementary endpoint management, vulnerability, or digital employee experience tools also valuable.
• Experience with regulated enterprise controls, change management, audit evidence, vulnerability remediation, or operational risk processes preferred.

Responsibilities

• Engineer and maintain Windows workstation build standards and deployment readiness.
• Provide level 3 technical support for complex Windows endpoint issues and field escalations.
• Support Windows patching, vulnerability remediation, and configuration standards with security teams.
• Lead or support SCCM, Intune, Autopilot, and cloud-management modernization efforts.
• Develop runbooks and documentation for Windows endpoint processes.
• Collaborate with Field Operations, Service Desk, security, and networking teams during investigations.
• Participate in pilot deployments, change management, and post-deployment monitoring.

Skills

Windows endpoint engineering

PowerShell scripting

Endpoint management

Education

BS degree

Tools

SCCM

Intune

Autopilot

Group Policy

Entra ID

Tanium

Nexthink

Job description

We believe our people are the key to our success. At Brooksource, we’re committed to helping our talented professionals grow. Whenever possible, we prioritize internal talent for open positions before recruiting externally.

About the Opportunity

Reporting to the End User Computing / Workplace Services leadership team, this role will provide senior engineering ownership for the Windows workstation platform, including build standards, deployment methods, software packaging, endpoint patching, vulnerability remediation, performance analysis, and level 3 endpoint support. This individual will play a key role in endpoint management modernization initiatives, Windows operating system upgrades, endpoint observability, and enterprise tooling while advancing platform reliability, security, and operational excellence.

Key Duties/Responsibilities:

• Engineer and maintain Windows workstation build standards, operating system upgrade plans, driver/firmware processes, software packaging, and deployment readiness.
• Provide level 3 technical support for complex Windows endpoint issues, recurring workstation performance degradation, endpoint reliability concerns, and hard-to-resolve field escalations.
• Support Windows patching, vulnerability remediation, compliance baselines, and configuration standards in partnership with security and infrastructure teams.
• Lead or support SCCM, Intune, Autopilot, co-management, and cloud-management modernization efforts as part of a broader SCCM-to-Intune journey.
• Use endpoint monitoring and management data to identify patterns, isolate root causes, prioritize remediation, and verify that corrective actions improve user experience.
• Develop repeatable technical runbooks, engineering documentation, field support guidance, and operational handoffs for Windows endpoint processes.
• Partner with Field Operations, Service Desk, security, networking, and application teams to separate endpoint, application, network, and security-tool impacts during investigations.
• Participate in pilot deployments, early adopter rings, change management, validation plans, and post-deployment monitoring for Windows platform changes.
• Support evaluation and adoption of endpoint management or performance platforms, with Tanium experience strongly preferred and Aternity/Nexthink-style observability experience beneficial.

Skills:

• Deep experience with Windows 10/11 enterprise endpoint engineering, device lifecycle, OS build, imaging, driver management, patching, configuration baselines, and workstation troubleshooting.
• Hands-on experience with Microsoft Configuration Manager/SCCM, Microsoft Intune, Windows Autopilot, Group Policy, Entra ID device concepts, and endpoint compliance reporting.
• Preferred experience with Tanium for endpoint visibility, inventory, patching, performance analysis, vulnerability investigation, or remediation workflows.
• Strong scripting and automation skills using PowerShell or comparable tools to reduce manual work and improve support consistency.
• Ability to interpret endpoint telemetry, event logs, performance counters, agent behavior, boot/logon data, and software conflicts to drive root-cause analysis.
• Strong communication skills with the ability to brief Field Operations, Service Desk, technology leadership, and security stakeholders on technical risks and actions.
• Experience operating in a change-controlled enterprise environment with documented testing, validation, and rollback planning.

Qualifications:

• BS and 8+ years of relevant Windows endpoint engineering, desktop platform, infrastructure operations, or equivalent experience.
• 7+ years of Windows OS, Microsoft endpoint management, packaging, deployment, and enterprise workstation support experience.
• Experience supporting large, distributed enterprise environments and partnering with field support or service desk organizations.
• Tanium experience preferred; experience with complementary endpoint management, vulnerability, or digital employee experience tools also valuable.
• Experience with regulated enterprise controls, change management, audit evidence, vulnerability remediation, or operational risk processes preferred.

About Us:

Brooksource, Medasource, and Calculated Hire are part of the Eight Eleven Group family of companies and operate under Eight Eleven Group, LLC. All employees receive the same benefits, policies, and terms of employment.

Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

EEO Statement:

We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital status, military or veteran status, citizenship, pregnancy (including childbirth, lactation, and related conditions), or any other protected status in accordance with applicable federal, state, and local laws.

Pay Disclaimer:

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.