Supervisor Endpoint Services

PALIC-Pan-American Life Insurance Company; United States; On-site; USD 140,000 - 180,000; Full time

Job summary

PALIC-Pan-American Life Insurance Company is seeking an Endpoint Services Supervisor to steer endpoint strategy and governance across the USA, Latin America, and Caribbean. You will lead a dedicated engineering team, delivering secure, scalable services for Windows, iOS, iPadOS, and Android, while aligning with IT and InfoSec priorities.

The role emphasizes automation, policy enforcement, and lifecycle management, with responsibility for architecture, deployment, and enterprise-wide remediation

Qualifications

• Bachelor’s degree in IT/CS or related field.
• 5+ years in enterprise endpoint engineering and management.
• Microsoft Endpoint Management/365 certification or ITIL Foundation.

Responsibilities

• Define endpoint strategy and governance across regions.
• Lead platform architecture for Intune, Entra ID, Patch My PC, Ivanti.
• Oversee deployment, patching, and lifecycle management for devices.
• Automate remediation and improve endpoint performance.
• Partner with InfoSec to enforce security standards and controls.

Skills

Endpoint management

Leadership

Automation

Security governance

Bilingual EN/ES

Education

Bachelor's degree in CS/IT or related

ITIL Foundation

Tools

Intune

Entra ID

Patch My PC

Ivanti Neurons

Microsoft 365

ITSM

Job description

The Endpoint Services Supervisor oversees endpoint strategy, engineering, and lifecycle management for a multinational insurance organization across the United States, Latin America, and the Caribbean. Leading a specialized endpoint engineering team, this role is responsible for delivering secure, reliable, and scalable services across Windows, Apple, and Android devices. The Endpoint Services Supervisor partners with IT, Information Security, and business leaders to drive automation, governance, operational excellence, and continuous improvement across the enterprise endpoint environment.

ESSENTIAL FUNCTIONS:

• Endpoint Strategy & Governance
  • Define the enterprise endpoint strategy and roadmap across the USA, Latin America, and Caribbean.
  • Establish endpoint engineering standards, policies, and governance frameworks.
  • Align endpoint services with business priorities and Information Security requirements.
  • Evaluate emerging technologies and recommend investments based on value, risk, and cost.
  • Simplify the endpoint toolset, reduce overlapping capabilities, and optimize licensing and costs.
  • Plan endpoint modernization and standardization across regions and device platforms.
• Architecture & Platform Leadership
  • Lead platform architecture for Intune, Entra ID, Patch My PC, and Ivanti.
  • Oversee design, integration, reliability, and lifecycle management for Windows, iOS, iPadOS, and Android.
  • Review and approve endpoint designs, configuration standards, and engineering initiatives.
  • Provide strategic oversight for application packaging, deployment, patching, and enterprise automation activities performed by the Endpoint Engineering team.
  • Use telemetry and analytics to identify configuration drift, reliability issues, and emerging risks.
  • Resolve complex endpoint architecture issues and recommend scalable, preventive solutions.
• Service Excellence & Operational Oversight
  • Set Endpoint Services objectives and metrics for reliability, compliance, patching, and device health.
  • Use telemetry, analytics, and incident trends to detect degradation and prevent service disruptions.
  • Automate preventive remediation and improve endpoint performance and user experience.
  • Coordinate operational readiness with Infrastructure, Network, Identity, Cloud, ITSM, and Applications.
  • Eliminate recurring problems through root cause analysis and permanent engineering fixes.
  • Govern provisioning, deployment, updates, refresh, and secure device retirement.
• Security, Compliance & Risk Management
  • Partner with Information Security to define and implement endpoint security standards.
  • Lead endpoint vulnerability remediation and patching against risk-based priorities agreed with InfoSec.
  • Provide oversight and governance to ensure endpoint platforms and services meet applicable regulatory, audit, and corporate security requirements.
  • Identify emerging endpoint risks and recommend mitigations to IT and Information Security.
  • Enforce security baselines and correct configuration drift; InfoSec retains security policy and risk governance.
  • Provide endpoint audit evidence and deliver remediation plans with Information Security.
• Leadership, Innovation & Organizational Enablement
  • Supervise endpoint engineers; set goals, assign work, and manage performance and accountability.
  • Coach and develop engineers through feedback, career plans, knowledge sharing, and technical training.
  • Drive proactive engineering and automation to prevent problems and improve the endpoint experience.
  • Partner with Architecture, Procurement, InfoSec, and business stakeholders on priorities and technology decisions.
  • Represent Endpoint Services in enterprise planning and recommend measurable improvements.

Education & Experience:

• Required: Bachelor's degree in Computer Science, Information Technology, Systems Administration, Engineering, or a related field.
• Required: 5+ years in enterprise endpoint engineering and management. Experience leading, supervising and coaching endpoint teams. Experience developing endpoint roadmaps, automating operations, and delivering vulnerability remediation and compliance in hybrid and cloud environments.
• Required: Relevant Microsoft Endpoint Management, Microsoft 365, or IT Service Management certification, or equivalent demonstrated experience ITIL Foundation.
• Preferred: Microsoft 365 Enterprise Administrator Expert (MS 102) Entra ID Administrator Associate (SC 300) or Intune Administrator Associate (MD 102) CompTIA Security+

KEY SUCCESS FACTORS:

• Enterprise endpoint engineering with Intune, Autopilot, Entra ID, and cloud-based Ivanti Neurons.
• Risk-based endpoint patching, vulnerability remediation, and compliance with InfoSec partners.
• Provisioning and lifecycle engineering for Windows clients, iOS, iPadOS, and Android Enterprise.
• Application packaging, testing, deployment, and patching, including Patch My PC.
• Automation and orchestration using PowerShell, Microsoft Graph API, and Power Automate.
• Fluently bilingual in English and Spanish
• Endpoint telemetry and anal