Senior Windows Endpoint Engineer

The Fannie Mae; Reston (VA); Hybrid; USD 123,000 - 161,000; Full time

Job summary

Fannie Mae in Reston, VA seeks a Senior Windows Endpoint Engineer to design, implement, and manage enterprise endpoint solutions using Intune, Workspace ONE, and Autopilot. You will optimize Windows 11 configurations, automate provisioning, and improve security posture across a large device fleet.

You will collaborate with IT and cybersecurity teams, lead complex troubleshooting, and advance zero-touch deployment while maintaining regulatory compliance and a strong focus on user experience in a

Qualifications

• 2+ years of Windows endpoint engineering or endpoint management experience.
• Microsoft Intune administration experience.
• Windows 11 engineering and troubleshooting expertise.
• Experience with Microsoft Graph API.
• Hands-on experience with Windows Autopatch.
• Advanced PowerShell scripting and automation skills.
• Experience managing Configuration Profiles and Compliance Policies.
• Knowledge of Microsoft Entra ID device management.
• Strong understanding of endpoint security and compliance frameworks.
• Experience supporting large enterprise endpoint environments.

Responsibilities

• Design, implement, and maintain enterprise endpoint management solutions using Microsoft Intune.
• Manage endpoint lifecycle processes including provisioning, deployment, configuration, maintenance, and retirement.
• Develop and maintain device configuration profiles, compliance policies, update rings, and security baselines.
• Support migration and coexistence strategies between Workspace ONE and Microsoft Intune.
• Administer and support Windows 11 enterprise environments.
• Create and manage standardized endpoint configurations and OS deployment strategies.
• Evaluate new Microsoft endpoint technologies and recommend improvements to the workplace computing environment.
• Provide advanced troubleshooting for complex Windows platform issues.
• Develop PowerShell automation solutions to improve operational efficiency.
• Create automated remediation, reporting, compliance validation, and deployment processes.
• Use Microsoft Graph APIs to automate endpoint administration, reporting, and device lifecycle activities.
• Implement endpoint security standards and compliance controls.
• Manage device compliance policies, encryption, security baselines, and conditional access requirements.
• Partner with cybersecurity teams to remediate vulnerabilities and maintain regulatory compliance.
• Monitor endpoint health, risk, and policy adherence across enterprise device fleets.
• Design and support Windows Autopilot deployments.
• Troubleshoot enrollment, provisioning, and Enrollment Status Page issues.
• Implement zero-touch deployment and device onboarding strategies.
• Optimize user experience during provisioning and device refresh initiatives.
• Lead root cause analysis of complex endpoint management and policy deployment issues.
• Troubleshoot Microsoft Intune, MDM, compliance, device registration, and identity integration issues.
• Support Tier 3 escalation activities for endpoint-related incidents and outages.

Skills

PowerShell scripting

Microsoft Intune

Windows 11 engineering

Microsoft Graph API

Windows Autopilot

Endpoint security & compliance

Workspace ONE

SCCM/MECM

Education

Bachelor's degree or equivalent

Tools

SCCM/MECM

Job description

## Senior Windows Endpoint EngineerApplyremote type: Flexlocations: Reston, VAtime type: Full timeposted on: Posted Todayjob requisition id: JR2761Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.Job DescriptionAs a valued colleague on our team, you will design and develop moderately complex solutions for information technology (IT) infrastructure environments, including coding, testing, and certifying technology platforms, software, and applications under limited supervision.**THE IMPACT YOU WILL MAKE**The **Senior Windows Endpoint Engineer** role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:**Endpoint Management*** Design, implement, and maintain enterprise endpoint management solutions using Microsoft Intune.* Manage endpoint lifecycle processes including provisioning, deployment, configuration, maintenance, and retirement.* Develop and maintain device configuration profiles, compliance policies, update rings, and security baselines.* Support migration and coexistence strategies between Workspace ONE and Microsoft Intune.**Windows Engineering*** Administer and support Windows 11 enterprise environments.* Create and manage standardized endpoint configurations and operating system deployment strategies.* Evaluate new Microsoft endpoint technologies and recommend improvements to the workplace computing environment.* Provide advanced troubleshooting for complex Windows platform issues.**Automation & Scripting*** Develop PowerShell automation solutions to improve operational efficiency.* Create automated remediation, reporting, compliance validation, and deployment processes.* Use Microsoft Graph APIs to automate endpoint administration, reporting, and device lifecycle activities.**Endpoint Security & Compliance*** Implement endpoint security standards and compliance controls.* Manage device compliance policies, encryption, security baselines, and conditional access requirements.* Partner with cybersecurity teams to remediate vulnerabilities and maintain regulatory compliance.* Monitor endpoint health, risk, and policy adherence across enterprise device fleets.**Autopilot & Provisioning*** Design and support Windows Autopilot deployments.* Troubleshoot enrollment, provisioning, and Enrollment Status Page issues.* Implement zero-touch deployment and device onboarding strategies.* Optimize user experience during provisioning and device refresh initiatives.**Advanced Troubleshooting*** Lead root cause analysis of complex endpoint management and policy deployment issues.* Troubleshoot Microsoft Intune, MDM, compliance, device registration, and identity integration issues.* Support Tier 3 escalation activities for endpoint-related incidents and outages.**Minimum Required Experiences:*** 2 years of Windows endpoint engineering or endpoint management experience.* Microsoft Intune administration experience.* Windows 11 engineering and troubleshooting expertise.* Experience with Microsoft Graph API.* Hands-on experience with Windows Autopatch.* Advanced PowerShell scripting and automation skills.* Experience managing Configuration Profiles and Compliance Policies.* Knowledge of Microsoft Entra ID device management.* Strong understanding of endpoint security and compliance frameworks.* Experience supporting large enterprise endpoint environments.* Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.**Desired Experiences:*** Bachelor degree or equivalent* Workspace ONE administration experience.* SCCM/MECM experience.* Windows Autopilot deployment expertise.* Experience with Conditional Access and Zero Trust initiatives.* Endpoint analytics and reporting experience.* Microsoft certifications in Intune, Endpoint Administrator, or related technologies.* Experience supporting hybrid and cloud-native device management architectures.**Target Pay Range:** $123,000.00 - 161,000.00 a year**Internal Job Title:** End User Services - Technology Engineering - Senior Associate**#LI-JM1** **#LI-Hybrid**QualificationsEducation:Bachelor's Level Degree (Required)The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.