Sr. Unified Endpoint Management Engineer

001 Brown & Brown, Inc; Plano (TX); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401k

Student loan assistance

Tuition reimbursement

Mental health services

Paid time off

Job summary

Brown & Brown, Inc. in Plano, TX is seeking a Sr. Unified Endpoint Management Engineer to own and optimize enterprise endpoint platforms, mainly Microsoft Intune, Windows Autopilot, and Windows 365 Cloud PC.

This senior IC role drives automation, engineering standards, and secure policy management while collaborating across Security, IT Service, Infrastructure, and application teams to deliver scalable, compliant endpoint services for end users.

Qualifications

• 7+ years of progressive experience in endpoint engineering or related infrastructure engineering.
• 5+ years of hands-on Microsoft Intune administration.
• Proficiency with Intune, Windows Autopilot, Windows 365 Cloud PC, Entra ID, Windows 10/11, and Conditional Access policies.
• Strong PowerShell scripting for administration, automation, reporting, troubleshooting, and proactive remediation.
• Experience with endpoint security baselines, patching, and deployment pipelines in an enterprise environment.

Responsibilities

• Manage, tune, and govern Intune policies, compliance settings, profiles, update rings, and endpoint security policies for Windows environments.
• Package, test, deploy, and manage enterprise application distribution across endpoints; coordinate validation with testing and owners.
• Troubleshoot enrollment, deployment, provisioning, identity, and policy conflicts; perform root-cause analysis and implement corrective actions.
• Design, deploy, and support Windows 365 Cloud PC solutions for scale, security, and efficiency.
• Develop PowerShell automation to reduce manual work and improve endpoint health.
• Collaborate with Security, IT Service, Infrastructure, networking, identity, and applications teams to improve full lifecycle of endpoint services.

Skills

Microsoft Intune

Windows Autopilot

Windows 365 Cloud PC

Microsoft Entra ID

Conditional Access policies

PowerShell scripting

Endpoint security baselines

Graph API

Log Analytics

Azure Monitor

Tools

Microsoft Graph API

Log Analytics

Azure Monitor

Job description

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers. Brown & Brown is seeking a Sr. Unified Endpoint Management Engineer to join our growing team in Plano, TX! The Sr. Unified Endpoint Management(UEM) Engineer is responsible for the engineering, administration, optimization, and lifecycle management of enterprise endpoint platforms, including Microsoft Intune, Windows 365 Cloud PCs, Windows Autopilot, and related Microsoft technologies. This senior individual-contributor role owns durable platform outcomes, establishes engineering standards, drives automation and continuous improvement, and serves as an escalation point for complex endpoint issues. The role focuses on secure, scalable policy and device management, application packaging and distribution, and the design, planning, and deployment of virtual desktop solutions that deliver a consistent and reliable end-user experience. The engineer works across Security, IT Service, Infrastructure, application teams, and business stakeholders to ensure endpoint services remain secure, supportable, and aligned with business needs.

How You Will Contribute:

Manage, tune, and govern Microsoft Intune policies, compliance settings, configuration profiles, update rings, and endpoint security policies for a primarily Windows environment with a smaller macOS footprint. Support security baselines, Conditional Access controls; manage and enforce device compliance rules, encryption standards, and endpoint protection configurations in partnership with Security. Package, test, deploy, and manage enterprise application distribution across endpoints; coordinate validation with testing and application owners and monitor deployments for reliable, compliant delivery. Troubleshoot complex Intune enrollment, application deployment, provisioning, identity, and policy-conflict issues; lead root cause analysis and implement permanent corrective actions. Design, configure, deploy, and support Windows 365 Cloud PC solutions for scalability, performance, security, and operational efficiency. Engineer and continuously improve Windows Autopilot and device provisioning processes, including configuration standards, enrollment experience, performance tuning, and troubleshooting. Ensure endpoint designs and deployments follow enterprise architecture, security, operational, and compliance standards and accepted industry practices. Develop and maintain PowerShell automation and proactive remediation solutions that reduce manual effort, improve consistency, and strengthen endpoint health. Monitor endpoint platform health, compliance, deployment performance, and service trends; use data to identify risk and prioritize improvements. Own technical standards, platform documentation, operating procedures, diagrams, and support knowledge for assigned endpoint services. Collaborate with IT Service, Security, Infrastructure, networking, identity, application, and M&A teams to improve the full endpoint lifecycle and end-user experience. Serve as a senior escalation point for complex endpoint incidents and problems; partner with Microsoft and other vendors when advanced product support is required. Evaluate new Microsoft endpoint capabilities and recommend adoption based on business value, security, supportability, cost, and architectural fit. Plan and execute platform upgrades, feature releases, pilots, and production changes using established change, testing, release, and rollback practices. Provide technical guidance, peer mentoring, and knowledge transfer to engineers and support teams; contribute to team standards and engineering discipline.

Skills & Experience to be Successful:

7+ years of progressive experience in endpoint engineering, enterprise device management, or related infrastructure engineering, including at least 5 years of hands‑on Microsoft Intune administration. Advanced hands‑on proficiency with Microsoft Intune, Windows Autopilot, Windows 365 Cloud PCs, Microsoft Entra ID, Windows 10/11, and Conditional Access policies. Strong experience with device configuration, compliance, endpoint security baselines, application packaging and deployment, patching, and modern provisioning. Strong PowerShell scripting skills for administration, automation, reporting, troubleshooting, and proactive remediation. Demonstrated experience diagnosing complex endpoint, identity, enrollment, application, and policy issues in an enterprise environment. Working knowledge of endpoint security, vulnerability remediation, encryption, least privilege, Zero Trust principles, and audit or compliance requirements. Experience creating technical standards, solution documentation, operational procedures, and knowledge-transfer materials. Ability to participate in scheduled production changes and critical‑incident support outside normal business hours when required. Experience with Microsoft Graph API, Log Analytics, Azure Monitor, or reporting platforms used to automate and monitor endpoint services (preferred). Experience managing mobile or multi-platform endpoints such as iOS, Android, or macOS (preferred).

Teammate Benefits & Total Well-Being:

• Health Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance
• Financial Benefits: ESPP; 401k; Student Loan Assistance; Tuition Reimbursement
• Mental Health & Wellness: Free Mental Health & Enhanced Advocacy Services
• Beyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more

Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.

The Power To Be Yourself As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, “The Power to Be Yourself”. We think of ourselves as a team, so we have teammates - not employees. We strive to attract people who are competitive, driven, and disciplined. Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers. Founded in 1939 as a small, two-partner firm, Brown & Brown (NYSE: BRO) and our team of companies have grown into one of the world’s largest insurance brokerages while staying true to our foundation of trust, resilience, and delivering results. With a team that is as connected locally as it is globally, our high-performing, highly collaborative team delivers innovative risk and insurance solutions. We look for individuals who embrace our culture, thrive in a collaborative environment, are driven to grow and succeed, and are committed to always doing what is right. With a unique culture built on integrity, superior capabilities and grit, we value teamwork, trust and courage. We think of ourselves as a team, so we have teammates—not employees, and leaders—not managers. Everything we do is about the greater “WE”—never “me.”While diverse in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers. Brown & Brown and its affiliates maintain an internal recruiting team responsible for filling open roles posted to the public.