Sr Systems Engineer (Microsoft 365 Collaboration Platforms)

LEN Lennar Corporation; Town of Florida (NY); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) Company Match

Paid time off

Education Assistance

Adoption Assistance

Job summary

Lennar is seeking a Senior Systems Engineer for Endpoint Engineering to lead planning, implementation, and support of enterprise endpoint management and VDI across Windows, macOS, iOS, and Android. You will mentor engineers and collaborate with security and infrastructure teams to ensure secure, high-performing endpoints.

Responsibilities include Intune optimization, VDI administration, and developing endpoint security baselines, patching, and deployment automation, with a focus on scalable,

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 7+ years in systems engineering, enterprise environments, and endpoint administration.
• Hands-on experience with Microsoft Intune / Endpoint Manager for MDM/MAM across Windows, macOS, iOS and Android.
• Experience with VDI platforms (AVD, Citrix, VMware Horizon) including image management and session hosting.
• 3+ years scripting/automation (PowerShell, Python) including Autopilot/zero-touch deployment.
• Familiarity with endpoint security tooling (Defender for Endpoint, BitLocker, DLP).
• Strong AD/Entra ID knowledge including GPOs, hybrid identity, Conditional Access.

Responsibilities

• Administer and optimize Microsoft Intune for device management at scale.
• Manage VDI environments (AVD, Citrix, VMware Horizon) for remote/hybrid workers.
• Develop and maintain endpoint security baselines and DLP policies.
• Oversee patching and software updates via Intune, MECM/SCCM or equivalents.
• Package, deploy, and manage Endpoint software with scripting/automation.
• Mentor junior engineers and lead high-priority endpoint projects.
• Collaborate with security, network, and application teams on endpoint strategy.

Skills

Endpoint management

PowerShell / Python

Intune / Endpoint Manager

VDI (AVD, Citrix, VMware Horizon)

Active Directory / Entra ID

Project leadership & mentoring

Education

Bachelor's degree in CS/IT

Tools

Microsoft Intune

MECM/SCCM

Azure

Citrix

VMware Horizon

Job description

Senior Systems Engineer Endpoint Engineering We are Lennar Lennar is one of the nation’s leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500 company and consistently ranked among the top homebuilders in the United States. A Career that Empowers You to Build Your Future The Senior Endpoint Engineer leads the planning, implementation, administration, and support of enterprise endpoint management systems and virtual desktop infrastructure (VDI) serving over 12,000 geographically distributed endpoints across Windows, macOS, iOS, Android, and other devices. The role serves as a technical leader, mentor, and subject matter expert, ensuring secure, well-managed, and high-performing endpoints across the enterprise.

Your Responsibilities on the Team Endpoint Engineering & Management

• Administer and optimize Microsoft Intune for modern device management across Windows, macOS, iOS, and Android, including enrollment, configuration and compliance policies, app deployment, and Windows Autopilot zero-touch provisioning at scale.
• Manage Virtual Desktop Infrastructure (VDI) environments, including Azure Virtual Desktop (AVD), Citrix, or VMware Horizon, ensuring high availability, performance, and a consistent user experience for remote and hybrid workers.
• Develop and maintain endpoint security baselines, CIS benchmarks, and hardening standards, partnering with security and infrastructure teams to enforce Microsoft Defender for Endpoint, BitLocker encryption, and data loss prevention (DLP) policies.
• Oversee endpoint patching and software update management using Intune, MECM/SCCM, or equivalent tooling, ensuring timely remediation of vulnerabilities across the fleet.
• Manage application packaging, deployment, and lifecycle for enterprise endpoint software, including scripting and automation using PowerShell or similar tools.
• Monitor endpoint health, compliance posture, and fleet performance using telemetry and reporting, proactively remediating issues before they impact end users.
• Support BYOD and corporate device programs, including enrollment, conditional access enforcement, and data separation policies via Intune App Protection Policies (APP).
• Identity & Access (Endpoint Focus) Administer Conditional Access policies, RBAC, and compliance enforcement via Microsoft Entra ID and Intune, ensuring devices meet security baselines before accessing corporate resources.
• Support joiner/mover/leaver lifecycle workflows from an endpoint provisioning and deprovisioning perspective, including Autopilot enrollment and device wipe/retire.
• Strategic Initiatives Partner with network engineering, application, security, and business teams to translate complex business requirements into scalable, reliable endpoint solutions aligned with corporate objectives and enterprise architecture standards.
• Mentor junior engineers on endpoint management, device security, and automation best practices, and serve as a senior technical resource for project planning and high-priority escalations.
• Research and evaluate emerging technologies across endpoint management, VDI, and device security; present findings and strategic recommendations to leadership.
• Develop and maintain system documentation, runbooks, standard operating procedures, and engineering best practices.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 7+ years of experience in systems engineering, enterprise environments, and endpoint platform administration.
• Demonstrated experience with Microsoft Intune / Microsoft Endpoint Manager for MDM/MAM, including device enrollment, compliance policies, configuration profiles, and app deployment across Windows, macOS, iOS, and Android.
• Hands-on experience with VDI platforms such as Azure Virtual Desktop (AVD), Citrix Virtual Apps and Desktops, or VMware Horizon, including image management, session hosting, and user profile optimization.
• 3+ years of scripting and automation experience using PowerShell, Python, or similar languages, including endpoint provisioning automation (Windows Autopilot, zero-touch deployment) and application management.
• Familiarity with endpoint security tooling including Microsoft Defender for Endpoint, BitLocker, and Intune-enforced compliance and DLP policies.
• Strong working knowledge of Active Directory and Microsoft Entra ID, including GPO management, hybrid identity, and Conditional Access as applied to endpoint policy enforcement.
• Relevant certifications a plus: Microsoft 365 Certified (MD-102 Endpoint Administrator or Administrator Expert), Azure Administrator (AZ-104), Azure Virtual Desktop Specialty, Citrix CCA-V, or equivalent.
• Proficiency with ServiceNow or similar ITSM platforms and experience with cloud infrastructure, including Azure.
• Strong troubleshooting and problem-solving skills across endpoint hardware, OS, and management tooling.
• Proven track record of owning large-scale projects to successful delivery while managing multiple priorities in a dynamic, fast-paced environment.
• Exceptional oral, written, and presentation skills, with a high degree of professionalism, thoroughness, and follow-up in communicating technical concepts in business terms to executives, vendors, contractors, and cross-functional teams.

Physical & Office/Site Presence Requirements

Regular, in-person attendance at the Lennar office during regular work hours is an essential function of this job. This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary. Some travel may be required for conferences and vendor engagements.

Life at Lennar

• Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of.
• Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments.
• To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations.
• From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies.
• Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone's Included Day.
• Lennar Associates will have access to these benefits as outlined by Lennar's policies and applicable plan terms.

Visit Lennartotalrewards.com to view our suite of benefits.

We're Always Looking Ahead Want to work in an innovative environment that empowers you to explore your passions? At Lennar, we promote asking questions and working together to solve complex problems. It's how we've become a leader in the homebuilding industry and why our Associates love working here. If you're interested in helping people find their future homes and, in doing so, build a better future for themselves, then Lennar is the place for you.

Work Where Everyone’s Included

We're committed to building and sustaining an inclusive culture where everyone has a seat at the table, and we're all on a first-name basis. This inclusive culture influences our hiring practices, the communities we serve and how we build better career experiences for all our Associates. It's why we created our Everyone's Included Advisory Council, and we'd love for you to be a part of our shared journey.

Join Our Talent Network

Welcome to the Lennar Community! We are tickled, delighted and happy that you've decided to join our Talent Community! We look forward to connecting about career opportunities at Lennar.