Sr. Unified Endpoint Management Engineer

Brown & Brown; Plano (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

Brown & Brown in Plano, TX is seeking a Sr. Unified Endpoint Management Engineer to lead the engineering, administration, and lifecycle management of enterprise endpoint platforms, focusing on Microsoft Intune, Windows Autopilot, and Windows 365 Cloud PCs.

The role requires driving automation, engineering standards, and scalable, secure endpoint solutions, collaborating with Security, IT Service, Infrastructure, and business stakeholders to deliver reliable end-user experiences.

Qualifications

• 7+ years in endpoint engineering or enterprise device management.
• Hands-on experience with Microsoft Intune administration.
• Experience with Windows 365 Cloud PCs and Autopilot.

Responsibilities

• Manage Intune policies, compliance, and endpoint security for Windows-first environment.
• Package, test, deploy enterprise apps and monitor deployment quality.
• Troubleshoot enrollment, deployment, identity, and policy issues; perform root-cause analysis.
• Design and support Windows 365 Cloud PC deployments for scalability and security.
• Develop PowerShell automation and proactive remediation.

Skills

Intune administration

Windows Autopilot

Windows 365 Cloud PCs

PowerShell scripting

Conditional Access

Endpoint security baselines

Entra ID

Graph API integration

Tools

Microsoft Graph API

Log Analytics

Azure Monitor

Job description

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Brown & Brown is seeking a Sr. Unified Endpoint Management Engineer to join our growing team in Plano, TX!

The Sr. Unified Endpoint Management(UEM) Engineer is responsible for the engineering, administration, optimization, and lifecycle management of enterprise endpoint platforms, including Microsoft Intune, Windows 365 Cloud PCs, Windows Autopilot, and related Microsoft technologies.

This senior individual-contributor role owns durable platform outcomes, establishes engineering standards, drives automation and continuous improvement, and serves as an escalation point for complex endpoint issues.

The role focuses on secure, scalable policy and device management, application packaging and distribution, and the design, planning, and deployment of virtual desktop solutions that deliver a consistent and reliable end-user experience.

The engineer works across Security, IT Service, Infrastructure, application teams, and business stakeholders to ensure endpoint services remain secure, supportable, and aligned with business needs.

How You Will Contribute:

• Manage, tune, and govern Microsoft Intune policies, compliance settings, configuration profiles, update rings, and endpoint security policies for a primarily Windows environment with a smaller macOS footprint.
• Support security baselines, Conditional Access controls; manage and enforce device compliance rules, encryption standards, and endpoint protection configurations in partnership with Security.
• Package, test, deploy, and manage enterprise application distribution across endpoints; coordinate validation with testing and application owners and monitor deployments for reliable, compliant delivery.
• Troubleshoot complex Intune enrollment, application deployment, provisioning, identity, and policy-conflict issues; lead root cause analysis and implement permanent corrective actions.
• Design, configure, deploy, and support Windows 365 Cloud PC solutions for scalability, performance, security, and operational efficiency.
• Engineer and continuously improve Windows Autopilot and device provisioning processes, including configuration standards, enrollment experience, performance tuning, and troubleshooting.
• Ensure endpoint designs and deployments follow enterprise architecture, security, operational, and compliance standards and accepted industry practices.
• Develop and maintain PowerShell automation and proactive remediation solutions that reduce manual effort, improve consistency, and strengthen endpoint health.
• Monitor endpoint platform health, compliance, deployment performance, and service trends; use data to identify risk and prioritize improvements.
• Own technical standards, platform documentation, operating procedures, diagrams, and support knowledge for assigned endpoint services.
• Collaborate with IT Service, Security, Infrastructure, networking, identity, application, and M&A teams to improve the full endpoint lifecycle and end-user experience.
• Serve as a senior escalation point for complex endpoint incidents and problems; partner with Microsoft and other vendors when advanced product support is required.
• Evaluate new Microsoft endpoint capabilities and recommend adoption based on business value, security, supportability, cost, and architectural fit.
• Plan and execute platform upgrades, feature releases, pilots, and production changes using established change, testing, release, and rollback practices.
• Provide technical guidance, peer mentoring, and knowledge transfer to engineers and support teams; contribute to team standards and engineering discipline.

Skills & Experience to be Successful:

• 7+ years of progressive experience in endpoint engineering, enterprise device management, or related infrastructure engineering, including at least 5 years of hands-on Microsoft Intune administration.
• Advanced hands-on proficiency with Microsoft Intune, Windows Autopilot, Windows 365 Cloud PCs, Microsoft Entra ID, Windows 10/11, and Conditional Access policies.
• Strong experience with device configuration, compliance, endpoint security baselines, application packaging and deployment, patching, and modern provisioning.
• Strong PowerShell scripting skills for administration, automation, reporting, troubleshooting, and proactive remediation.
• Demonstrated experience diagnosing complex endpoint, identity, enrollment, application, and policy issues in an enterprise environment.
• Working knowledge of endpoint security, vulnerability remediation, encryption, least privilege, Zero Trust principles, and audit or compliance requirements.
• Experience creating technical standards, solution documentation, operational procedures, and knowledge-transfer materials.
• Ability to participate in scheduled production changes and critical-incident support outside normal business hours when required.
• Experience with Microsoft Graph API, Log Analytics, Azure Moni