System Engineer

Adhesives Research; Glen Rock (York County); On-site; USD 95,000 - 130,000; Full time

Job summary

Adhesives Research in Glen Rock, PA, seeks a System Engineer - Infrastructure Services to lead design and lifecycle management of endpoint infrastructure and user computing platforms. You will manage Windows devices, Microsoft Intune, Azure, Active Directory, and related services to improve user experience and security.

The role emphasizes automation, scripting (PowerShell), and cross-functional collaboration across IT teams while supporting enterprise workplace services and cloud integration.

Qualifications

• Bachelor degree in CS/IT or related field or equivalent experience.
• 5–7 years in systems engineering focused on Workplace Services or device management.
• Strong hands-on with Intune, Autopilot, and Endpoint Manager.
• Expertise in Active Directory, Azure AD, and Group Policy administration.
• Hybrid (on-prem + cloud) Windows endpoint management experience.
• Knowledge of ISO 27001, NIST, 21 CFR Part 11 compliance.

Responsibilities

• Design, implement, and manage endpoint infrastructure and device management.
• Maintain and enforce desktop engineering standards and user experience.
• Administer Intune, Autopilot, Endpoint Manager and GPOs for devices.
• Oversee lifecycle of end-user devices, imaging, deployment, patching, retirement.
• Ensure endpoint security: antivirus, encryption, conditional access.
• Collaborate with helpdesk and other teams to ensure seamless support.

Skills

Desktop engineering

Device management

User experience

PowerShell

Active Directory

Azure Entra ID

Intune

Autopilot

Endpoint Manager

Group Policy Objects (GPOs)

Endpoint security

Scripting & automation

Compliance frameworks

Cross-functional collaboration

Education

Bachelor's degree in Computer Science / Information Technology or related field

Tools

Intune

Autopilot

Endpoint Manager

Configuration Profiles

Active Directory

Azure AD / Entra ID

GPOs

SCCM

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Glen Rock, PA, US

2 days ago Requisition ID: 1585

Job Summary:

The System Engineer- Infrastructure Services will lead the design, implementation, and lifecycle management of endpoint infrastructure systems, directory services and user computing platforms across the enterprise. This role ensures reliable, secure, and efficient access to IT resources by managing Windows-based devices, Microsoft Intune, Azure, Group Policy, Active Directory, and related services. The engineer will lead initiatives to improve user experience, endpoint security, device lifecycle management, and software deployment, while supporting collaboration and mobility. The ideal candidate will have strong expertise in desktop engineering, automation, identity and access management, and a passion for optimizing end-user productivity.

Essential Functions:

• Design, recommend, and implement global workplace technologies that align with business needs and IT best practices
• Develop and maintain enterprise-wide standards for desktop engineering, device management, and user experience
• Administer and support Microsoft Intune, Autopilot, Endpoint Manager, and Configuration Profiles for modern device management
• Manage the full lifecycle of end-user devices (desktops, laptops, mobile), including imaging, deployment, patching, and retirement
• Maintain and support Active Directory, Group Policy Objects (GPOs), Azure Entra ID, and identity and access configurations
• Implement and enforce endpoint security policies including antivirus, encryption, and conditional access
• Participate in audits, IT risk assessments, and compliance activities (e.g., NIST, ISO 27001, 21 CFR Part 11)
• Develop and manage automation scripts (e.g., PowerShell) to streamline endpoint deployment, support, and reporting
• Provide Tier 3 support for end-user and endpoint issues; serve as a subject matter expert for escalations
• Collaborate with helpdesk, infrastructure, and application teams to ensure seamless support and service delivery
• Implement and monitor usage of self-service tools and knowledge bases to improve end-user experience
• Coordinate with hardware and software vendors to ensure timely support, SLAs, and lifecycle standards
• Contribute to the development and maintenance of workplace services documentation, standards, and training materials
• Participate in projects such as hardware refresh, OS upgrades, Zero Trust, and mobile device integration initiatives

Additional Responsibilities:

• Support security policies and participate in audits (NIST, ISO, GDPR, 21 CFR Part 11).
• Participate in incident response and security assessments.
• Provide training to IT team members on infrastructure best practices.
• Support hosting and networking technologies as needed.
• Administer software distribution and automation tools.
• Contribute to infrastructure budgeting and planning.
• Participate in infrastructure modernization and cloud migration initiatives.
• Perform other duties as assigned.

Job Specifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience)
• 5–7 years of experience in systems engineering with a focus on Workplace Services, End-User Computing, or Device Management
• Strong hands-on experience with Microsoft Intune, Autopilot, and Endpoint Manager
• Proven experience with Active Directory, Azure AD, and Group Policy administration
• Expertise in managing Windows endpoints in hybrid (on-prem + cloud) environments
• Solid understanding of endpoint security practices including antivirus, patching, encryption, and conditional access
• Experience with scripting and automation using PowerShell
• Familiarity with compliance frameworks such as ISO 27001, NIST, and 21 CFR Part 11
• Strong troubleshooting skills for desktops, mobile devices, and productivity tools (O365, VPN, MFA, etc.)
• Certifications such as Modern Desktop Administrator Associate, Azure Administrator, CompTIA A+, MD-102, or equivalent.
• Experience with:
• Endpoint analytics and performance monitoring tools
• Software deployment and patch management solutions (e.g., SCCM, Intune)
• ITSM tools and structured Change management processes
• Identity and access solutions (MFA, SSO, Conditional Access Policies)
• Ability to work cross-functionally with application, infrastructure, and support teams.

Physical Requirements

• Must be able to lift 50 lbs, bend, and climb stairs as needed.
• Ability to travel to company sites as required.