Sr Engineer - End User Services

Ulta Beauty; Chicago (IL); On-site; USD 103,000 - 125,000; Full time

Benefits offered by this job

Paid time off

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability benefits

Bonus plan

Job summary

Ulta Beauty seeks a Senior Engineer - End User Services to design, implement, automate, secure, and support scalable endpoint management in a hybrid environment across HQ, distribution centers, and stores. The role emphasizes Windows and Mac endpoint engineering, Intune administration, and automation using PowerShell with a focus on security and compliance.

The position requires collaboration with Security, Identity, and IT teams, strong scripting skills, and experience migrating Exchange to

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Systems, or related field.
• 5+ years of progressive enterprise end-user computing or endpoint engineering experience.
• Demonstrated ability to lead complex incident resolution, root cause analysis, problem management, change implementation, and operational readiness.
• Advanced experience with Microsoft Intune in a large, distributed enterprise environment.

Responsibilities

• Design and administer Microsoft Intune for Windows endpoints.
• Partner with Security and Identity teams on Microsoft Entra ID, endpoint security controls, certificates, conditional access, privileged access, vulnerability remediation, and audit evidence.
• Deliver technical design and support for Microsoft 365 services, including Teams, Exchange Online, SharePoint, OneDrive, and Office for the web.
• Lead EUS team’s portion of the project to migrate on-prem Exchange server to the cloud.
• Develop automation using PowerShell, Microsoft Graph APIs, and approved orchestration technologies.
• Create engineering standards, runbooks, documentation, monitoring, and dashboards.
• Ensure solutions meet architecture, security, privacy, change management, and business continuity requirements.
• Plan and execute production changes with testing, backout plans, communications, and validation.

Skills

Intune management

Windows endpoint

Mac endpoint

PowerShell scripting

Entra ID

Microsoft 365

Teams & Exchange

Automation tooling

Incident resolution

Security controls

Education

Bachelor's degree in Computer Science, Engineering, Information Systems

Tools

Microsoft Graph APIs

Exchange Online

Azure AD / Entra ID

Job description

Bolingbrook, Illinois

Information Technology

Full Time

528073

OVERVIEW

Live the experience. From professional empowerment to continual learning opportunities. From ongoing investment in new and emerging technologies to a career of self-determination. At Ulta Beauty, our tech team is critical to our scalability-and is recognized that way. We’ve been defined as a mature start-up. A place where interdepartmental exposure, open doors, and genuine collaboration is ubiquitous. Where challenges come fast and furious, requiring agility, mental dexterity, and creativity. Where our passion for better solutions drives us and is core to who we are.

We’re engineering for the future of retail, and it’s no-holds-barred. But for those motivated by continual change and ambiguity, by superior leadership, by whip smart colleagues who will press you daily for your very best, you’ll find that virtually nothing’s impossible at Ulta Beauty.

THE IMPACT YOU CAN HAVE:

The Senior Engineer - End User Services designs, implements, automates, secures, and supports scalable endpoint management solutions in a hybrid (on-prem & cloud) environment for devices at our corporate HQ, distribution centers, and retail store locations. The Senior Engineer provides deep technical expertise across a predominantly Windows (90%) and Apple endpoint management landscape. The role serves as a technical escalation point, establishing engineering standards, and solution roadmaps. The Senior Engineer also applies approved artificial intelligence and automation capabilities to improve testing, troubleshooting, documentation, reporting, and operational efficiency while following Ulta Beauty security and data-handling requirements.

YOU'LL ACCOMPLISH THESE GOALS BY:

Provide complex troubleshooting across devices, identity, network dependencies, cloud services, applications, integrations, and vendor platforms. Coordinate root cause analysis and permanent corrective actions.

• Design and administer Microsoft Intune for Windows endpoints, including enrollment, provisioning, application delivery, configuration profiles, compliance policies, security baselines, update management, reporting, and remediation.
• Partner with Security and Identity teams on Microsoft Entra ID, endpoint security controls, certificates, conditional access dependencies, privileged access, vulnerability remediation, and audit evidence.
• Deliver technical design and support for the overall suite of Microsoft 365 services, including Teams, Email (Exchange, Outlook app, etc.), SharePoint, OneDrive, and Office for the web.
• Leads EUS team’s portion of the project to migrate our on-prem Exchange server to the cloud.
• Develop automation using PowerShell, Microsoft Graph application programming interfaces (APIs), platform-native remediation, reporting tools, and approved orchestration technologies.
• Create engineering standards, support models, runbooks, knowledge articles, monitoring, dashboards, and technical documentation.
• Ensure solutions meet Ulta Beauty architecture, security, privacy, change management, business continuity, disaster recovery, and operational support requirements.
• Plan and execute production changes with appropriate testing, backout plans, communications, and validation. Account for retail peak periods and established change freeze requirements.
• Use approved artificial intelligence-assisted tools to accelerate analysis, scripting, testing, documentation, and operational response without compromising security, privacy, or quality.

ESSENTIALS FOR SUCCESS:

• Bachelor's degree in Computer Science, Engineering, Information Systems, a related field, or equivalent practical experience.
• 5+ years of progressive enterprise end-user computing or endpoint engineering experience, including design, implementation, automation, integration, and production support.
• Demonstrated ability to lead complex incident resolution, root cause analysis, problem management, change implementation, and operational readiness.
• Advanced experience with Microsoft Intune in a large, distributed enterprise environment.
• Advanced experience with Windows and MacOS endpoint engineering, deployment, policy, application packaging, patching, security baselines, and troubleshooting.
• Strong experience with Microsoft Entra ID, Microsoft 365, Microsoft Teams, Exchange, SharePoint, OneDrive, and Microsoft Graph APIs.
• Strong PowerShell scripting and automation skills. Experience with REST APIs, structured data formats, source control, and repeatable engineering practices.
• Experience with ServiceNow Information Technology Service Management (ITSM), CMDB, asset or configuration data, and endpoint management integrations.
• Knowledge of endpoint security, vulnerability remediation, certificate dependencies, identity controls, logging, monitoring, and enterprise best practices.
• Experience developing technical designs, standards, test plans, runbooks, support documentation, and roadmaps.
• Ability to evaluate products and vendor proposals, identify technical and operational risks, and translate findings into clear recommendations.
• Familiarity with approved generative artificial intelligence, prompt engineering, or intelligent automation workflows applied to engineering and operations.
• Strong written and verbal communication skills. Ability to work effectively with technical teams, business partners, vendors, and leadership.
• Ability to manage competing priorities in a fast-paced retail environment and deliver reliable outcomes with limited supervision.
• Experience mentoring engineers or providing technical leadership is preferred.
• Off-hours support, including 24x7 on-call participation and planned production changes, may be required.
• Minimal travel may be required to visit Ulta stores or distribution centers or attend training/conferences.

The pay range for this position is $102,900.00 - $125,000.00 / Year with the opportunity for eligible associates to earn additional compensation pursuant to the Company’s bonus plan. Exact pay will be based on factors including, but not limited to relevant education, qualifications, certifications, experience, level, shift, geographic location, and business and organizational needs. Full-time positions are eligible for paid time off, health, dental, vision, life and disability benefits. Part-time positions are eligible for dental, vision, life, and disability benefits. For additional information concerning our benefits, visit our Benefits and Career Development page: https://learn.bswift.com/ulta

ABOUT

At Ulta Beauty (NASDAQ: ULTA), the possibilities are beautiful. Ulta Beauty is the largest North American beauty retailer and the premier beauty destination for cosmetics, fragrance, skin care products, hair care products and salon services. We bring possibilities to life through the power of beauty each and every day in our stores and online with more than 25,000 products from approximately 500 well-established and emerging beauty brands across all categories and price points, including Ulta Beauty’s own private label. Ulta Beauty also offers a full-service salon in every store featuring - hair, skin, brow, and make-up services.

We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and the New York City Fair Chance Act.