Senior Windows Engineer, Endpoint Engineering

Landing Point; New York (NY); On-site; USD 120,000 - 140,000; Full time

Job summary

Landing Point, a global investment firm, seeks a Senior Windows Engineer to own the architecture, engineering, automation, security, and lifecycle management of the Windows endpoint environment across the enterprise.

You will lead SCCM/MECM and migrate to cloud-native Intune management, develop Intune policies, and oversee Autopilot deployments and Entra ID Join. Strong collaboration with Security is essential for robust endpoint controls.

Qualifications

• 7+ years of enterprise endpoint engineering experience.
• 5+ years managing Microsoft Configuration Manager (SCCM/MECM).
• 3+ years managing Microsoft Intune in a large enterprise environment.
• Experience supporting environments with 5,000+ endpoints preferred.
• Preferred certifications include Microsoft Certified: Endpoint Administrator Associate, Azure Administrator Associate, Enterprise Administrator Expert, and Security Operations Analyst Associate.
• Expert knowledge in Windows 11 administration, SCCM, Intune, Windows Autopilot, PowerShell scripting, and endpoint security technologies.

Responsibilities

• Design, implement, and support enterprise Windows endpoint management solutions.
• Manage and optimize Microsoft Configuration Manager (SCCM/MECM) infrastructure.
• Lead migration initiatives from traditional SCCM to cloud-native management using Microsoft Intune.
• Engineer and maintain Intune policies for device compliance, configuration, security baselines, endpoint protection, and deployment.
• Develop provisioning strategies utilizing Windows Autopilot, Intune, Hybrid Azure AD Join, and Entra ID Join.
• Lead Windows 11 deployment, maintenance, and upgrade programs.
• Package, test, deploy, and maintain enterprise software solutions.
• Develop automation solutions using PowerShell, Graph API, Azure Automation, and Azure Functions.
• Partner with Information Security to implement endpoint controls.
• Support and integrate Intune, Entra ID, Defender, and other Microsoft cloud technologies.
• Utilize Digital Experience Monitoring to analyze endpoint health and performance trends.
• Create and maintain technical documentation and engineering standards.

Skills

Windows endpoint engineering

PowerShell scripting

Endpoint security

Co-management

Windows 11 administration

Education

Bachelor's degree in computer science / information systems / engineering

Tools

SCCM/MECM

Intune

Windows Autopilot

Azure Automation

Microsoft Graph API

Microsoft Defender for Endpoint

Entra ID / Azure AD

Hybrid Azure AD Join

Job description

Company Overview:
A leading global alternative investment manager with a diverse portfolio across credit, private equity, real estate, and infrastructure is seeking a Senior Windows Engineer. This role focuses on the architecture, engineering, automation, security, and lifecycle management of the firm\'s global Windows endpoint environment.

A leading global alternative investment manager with a diverse portfolio across credit, private equity, real estate, and infrastructure is seeking a Senior Windows Engineer. This role focuses on the architecture, engineering, automation, security, and lifecycle management of the firm\'s global Windows endpoint environment.

Job Responsibilities:

• Design, implement, and support enterprise Windows endpoint management solutions.
• Manage and optimize Microsoft Configuration Manager (SCCM/MECM) infrastructure.
• Lead migration initiatives from traditional SCCM management to cloud-native management using Microsoft Intune.
• Engineer and maintain Microsoft Intune policies for device compliance, configuration, security baselines, endpoint protection, and application deployment.
• Develop and maintain device provisioning strategies utilizing Windows Autopilot, Microsoft Intune, Hybrid Azure AD Join, and Entra ID Join.
• Lead Windows 11 deployment, maintenance, and upgrade programs.
• Package, test, deploy, and maintain enterprise software solutions.
• Develop automation solutions using PowerShell, Graph API, Azure Automation, and Azure Functions.
• Partner with Information Security teams to implement endpoint security controls.
• Support and integrate Microsoft Intune, Microsoft Entra ID, Microsoft Defender, and other Microsoft cloud technologies.
• Utilize Digital Experience Monitoring tools to analyze endpoint health and performance trends.
• Create and maintain technical documentation, standard operating procedures, and engineering standards.

Qualifications:

• Bachelor’s degree in computer science, information systems, engineering, or related technical field; advanced degree preferred.
• 7+ years of enterprise endpoint engineering experience.
• 5+ years managing Microsoft Configuration Manager (SCCM/MECM).
• 3+ years managing Microsoft Intune in a large enterprise environment.
• Experience supporting environments with 5,000+ endpoints preferred.
• Preferred certifications include Microsoft Certified: Endpoint Administrator Associate, Azure Administrator Associate, Enterprise Administrator Expert, and Security Operations Analyst Associate.
• Expert knowledge in Windows 11 administration, Microsoft Configuration Manager, Microsoft Intune, Windows Autopilot, PowerShell scripting, and endpoint security technologies.
• Advanced knowledge in co-management, Windows Update for Business, Microsoft Defender for Endpoint, BitLocker, Conditional Access, Azure Automation, and Microsoft Graph API.

Compensation: Salary: $120,000 – $140,000, Plus Bonus