Sr Engineer - End User Services

Ulta Beauty, Inc.; Bolingbrook (IL); Hybrid; USD 103,000 - 125,000; Full time

Benefits offered by this job

Paid time off

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability benefits

Job summary

Ulta Beauty is seeking a Senior Engineer - End User Services to design, implement, and support scalable endpoint management across Windows and MacOS in a hybrid environment. You will lead technical initiatives, automate workflows with PowerShell and Graph APIs, and collaborate with Security and Identity teams to strengthen Entra ID and security controls.

The role requires 5+ years in enterprise endpoint engineering, strong scripting skills, and the ability to drive incidents to resolution while

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years of enterprise end-user computing or endpoint engineering.
• Ability to lead complex incident resolution and change implementations.
• Advanced experience with Microsoft Intune in a large distributed environment.
• Strong experience with Windows and MacOS endpoint management.

Responsibilities

• Design, implement, and maintain endpoint management across Windows and MacOS.
• Administer Microsoft Intune including enrollment, provisioning, policies, and baselines.
• Collaborate with Security and Identity teams on Entra ID and access controls.
• Develop automation using PowerShell and Graph APIs.
• Create runbooks, documentation, monitoring, and dashboards.
• Plan production changes with testing, backouts, and communications.
• Ensure security, privacy, and compliance requirements are met.
• Mentor engineers and provide technical leadership.

Skills

Windows endpoint engineering

MacOS endpoint engineering

PowerShell scripting

Microsoft Intune

Microsoft Entra ID

Microsoft 365

Exchange Online

Teams/SharePoint/OneDrive

Automation

Incident resolution leadership

Education

Bachelor's degree in Computer Science, Engineering, Information Systems or related field

Tools

Microsoft Intune

Microsoft Graph APIs

Azure Active Directory (Entra ID)

Exchange Online

Office 365 Suite

ServiceNow ITSM

Job description

OVERVIEW

Live the experience. From professional empowerment to continual learning opportunities. From ongoing investment in new and emerging technologies to a career of self-determination. At Ulta Beauty, our tech team is critical to our scalability-and is recognized that way. We’ve been defined as a \"mature start-up\". A place where interdepartmental exposure, open doors, and genuine collaboration is ubiquitous. Where challenges come fast and furious, requiring agility, mental dexterity, and creativity. Where our passion for better solutions drives us and is core to who we are.

We’re engineering for the future of retail, and it’s no-holds-barred. But for those motivated by continual change and ambiguity, by superior leadership, by whip smart colleagues who will press you daily for your very best, you’ll find that virtually nothing’s impossible at Ulta Beauty.

THE IMPACT YOU CAN HAVE:

The Senior Engineer - End User Services designs, implements, automates, secures, and supports scalable endpoint management solutions in a hybrid (on-prem & cloud) environment for devices at our corporate HQ, distribution centers, and retail store locations. The Senior Engineer provides deep technical expertise across a predominantly Windows (90%) and Apple endpoint management landscape. The role serves as a technical escalation point, establishing engineering standards, and solution roadmaps. The Senior Engineer also applies approved artificial intelligence and automation capabilities to improve testing, troubleshooting, documentation, reporting, and operational efficiency while following Ulta Beauty security and data-handling requirements.

YOU'LL ACCOMPLISH THESE GOALS BY:

Provide complex troubleshooting across devices, identity, network dependencies, cloud services, applications, integrations, and vendor platforms. Coordinate root cause analysis and permanent corrective actions.

• Design and administer Microsoft Intune for Windows endpoints, including enrollment, provisioning, application delivery, configuration profiles, compliance policies, security baselines, update management, reporting, and remediation.
• Partner with Security and Identity teams on Microsoft Entra ID, endpoint security controls, certificates, conditional access dependencies, privileged access, vulnerability remediation, and audit evidence.
• Deliver technical design and support for the overall suite of Microsoft 365 services, including Teams, Email (Exchange, Outlook app, etc.), SharePoint, OneDrive, and Office for the web.
• Leads EUS team’s portion of the project to migrate our on-prem Exchange server to the cloud.
• Develop automation using PowerShell, Microsoft Graph application programming interfaces (APIs), platform-native remediation, reporting tools, and approved orchestration technologies.
• Create engineering standards, support models, runbooks, knowledge articles, monitoring, dashboards, and technical documentation.
• Ensure solutions meet Ulta Beauty architecture, security, privacy, change management, business continuity, disaster recovery, and operational support requirements.
• Plan and execute production changes with appropriate testing, backout plans, communications, and validation. Account for retail peak periods and established change freeze requirements.
• Use approved artificial intelligence-assisted tools to accelerate analysis, scripting, testing, documentation, and operational response without compromising security, privacy, or quality.

ESSENTIALS FOR SUCCESS:

• Bachelor's degree in Computer Science, Engineering, Information Systems, a related field, or equivalent practical experience.
• 5+ years of progressive enterprise end-user computing or endpoint engineering experience, including design, implementation, automation, integration, and production support.
• Demonstrated ability to lead complex incident resolution, root cause analysis, problem management, change implementation, and operational readiness.
• Advanced experience with Microsoft Intune in a large, distributed enterprise environment.
• Advanced experience with Windows and MacOS endpoint engineering, deployment, policy, application packaging, patching, security baselines, and troubleshooting.
• Strong experience with Microsoft Entra ID, Microsoft 365, Microsoft Teams, Exchange, SharePoint, OneDrive, and Microsoft Graph APIs.
• Strong PowerShell scripting and automation skills. Experience with REST APIs, structured data formats, source control, and repeatable engineering practices.
• Experience with ServiceNow Information Technology Service Management (ITSM), CMDB, asset or configuration data, and endpoint management integrations.
• Knowledge of endpoint security, vulnerability remediation, certificate dependencies, identity controls, logging, monitoring, and enterprise best practices.
• Experience developing technical designs, standards, test plans, runbooks, support documentation, and roadmaps.
• Ability to evaluate products and vendor proposals, identify technical and operational risks, and translate findings into clear recommendations.
• Familiarity with approved generative artificial intelligence, prompt engineering, or intelligent automation workflows applied to engineering and operations.
• Strong written and verbal communication skills. Ability to work effectively with technical teams, business partners, vendors, and leadership.
• Ability to manage competing priorities in a fast-paced retail environment and deliver reliable outcomes with limited supervision.
• Experience mentoring engineers or providing technical leadership is preferred.
• Off-hours support, including 24x7 on-call participation and planned production changes, may be required.
• Minimal travel may be required to visit Ulta stores or distribution centers or attend training/conferences.

#LI - HYBRID

#LI - ML1

The pay range for this position is $102,900.00 - $125,000.00 / Year with the opportunity for eligible associates to earn additional compensation pursuant to the Company’s bonus plan. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, shift, geographic location, and business and organizational needs.

• Full-time positions are eligible for paid time off, health, dental, vision, life and disability benefits.
• Part-time positions are eligible for dental, vision, life, and disability benefits.

For additional information concerning our benefits, visit our Benefits and Career Development page: https://learn.bswift.com/ulta

ABOUT

AtUlta Beauty(NASDAQ: ULTA),the possibilities are beautiful. Ulta Beauty is the largest North American beauty retailer and the premier beauty destination for cosmetics, fragrance, skin care products, hair care products and salon services. We bring possibilities to life through the power of beauty each and every day in our stores and online with more than 25,000 products from approximately 500 well-established and emerging beauty brands across all categories and price points, including Ulta Beauty’s own private label. Ulta Beauty also offers a full-service salon in every store featuring-hair, skin, brow, and make-up services.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and the New York City Fair Chance Act.