Unified Endpoint Engineer

Eliassen Group; Charlotte (NC); Hybrid; Confidential; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k with company matching

Life insurance

Job summary

Eliassen Group seeks a Unified Endpoint Engineer in Charlotte, NC, focusing on MECM/SCCM and Intune co-management to manage Windows endpoint lifecycles, deployments, and patching at scale.

You will develop PowerShell automation, configure GPOs, and work with cross-functional teams to ensure security compliance and reliable endpoint operations.

Qualifications

• Three (3) or more years of IT experience involving enterprise endpoint management or related technologies.
• Hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment.
• Experience supporting Windows 10/11 endpoint lifecycle activities, including OS deployment or provisioning, patch management, software deployment, and troubleshooting.
• Experience packaging, deploying, and troubleshooting enterprise Windows applications.
• Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation.
• Experience administering or supporting Active Directory and Group Policy in an enterprise environment.
• Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices.
• Preferred: 5+ years in a large enterprise supporting 5,000+ users.
• Preferred: Experience with Microsoft Intune, co-management, Windows Autopilot, Microsoft Entra ID, and Apple Business Manager.
• Preferred: Endpoint Analytics, proactive remediations, compliance reporting, and patch reporting.
• Preferred: Experience supporting enterprise Windows OS upgrades or large-scale endpoint transformation initiatives.
• Preferred: Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements.
• Preferred: Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, or Azure/Entra.
• Preferred: Experience using AI-assisted administrative tools to improve scripting, documentation, troubleshooting, or operational efficiency.

Responsibilities

• Administer, maintain, and enhance enterprise endpoint management solutions using MECM/SCCM and related technologies.
• Engineer and support Windows 11 provisioning, OS deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise.
• Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, PowerShell, and other endpoint management technologies.
• Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures.
• Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation.
• Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements.
• Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms.
• Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed.
• Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies.
• Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements.
• Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, MDM, and MAM.
• Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary.
• Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders.
• Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services.
• Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues.
• Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency.
• Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency.

Skills

MECM/SCCM administration

Windows endpoint management

Intune & co-management

Active Directory & Group Policy

OS deployment & provisioning

PowerShell scripting

Education

Bachelor's degree + 1 year experience

Two-year college + 3 years

Master's degree

High school + 5 years related work

Equivalent education/experience

Tools

MECM/SCCM

PowerShell

Active Directory

Job description

Description:

Hybrid 2 on 3 off in Charlotte, NC

Our client seeks a Unified Endpoint Engineer specializing in Microsoft Endpoint Configuration Manager (MECM/SCCM) to engineer, implement, maintain, and support enterprise Unified Endpoint Management services. The role covers Windows endpoint lifecycle management including provisioning and upgrades, application deployment, patching, configuration management, automation, security compliance, troubleshooting, and support for Microsoft Intune, co-management, modern provisioning, and mobile device management.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $40.00 to $50.00/hr. w2

Responsibilities:

• Administer, maintain, and enhance enterprise endpoint management solutions using Microsoft Endpoint Configuration Manager (MECM/SCCM) and related technologies.
• Engineer and support Windows 11 provisioning, operating system deployment, feature upgrades, configuration management, and device lifecycle processes across the enterprise.
• Package, test, deploy, maintain, and troubleshoot enterprise applications using MECM/SCCM, PowerShell, and other endpoint management technologies.
• Coordinate and execute monthly Windows security patching and endpoint remediation activities, including testing, deployment, troubleshooting, compliance monitoring, and resolution of deployment failures.
• Develop, maintain, test, and troubleshoot PowerShell scripts and other automation used for endpoint administration, software deployment, configuration management, reporting, and remediation.
• Configure, test, deploy, and maintain Group Policy Objects (GPOs), endpoint configuration policies, compliance policies, and related controls in accordance with enterprise standards and security requirements.
• Support Microsoft Intune and co-management capabilities, including device enrollment, configuration profiles, compliance policies, application deployment, and migration of endpoint management capabilities to modern management platforms.
• Monitor endpoint health, deployment status, patch compliance, configuration compliance, and other operational metrics; investigate issues and implement corrective actions as needed.
• Troubleshoot complex Windows endpoint issues involving operating systems, applications, registry settings, services, file systems, Active Directory, Group Policy, networking, security controls, and endpoint management technologies.
• Support endpoint security and vulnerability management activities by implementing approved security configurations, remediating vulnerabilities, and assisting with zero-trust, PCI, and other enterprise security requirements.
• Support management of mobile and Apple devices using technologies such as Microsoft Intune, Apple Business Manager, Mobile Device Management (MDM), and Mobile Application Management (MAM).
• Participate in testing and implementation of endpoint changes through established change management processes, including documenting changes, evaluating implementation impacts, coordinating deployments, and supporting rollback or remediation activities when necessary.
• Participate in endpoint technology projects and coordinate technical activities with Cybersecurity, Identity, Service Desk, Infrastructure, Networking, Application Teams, departmental IT liaisons, vendors, and other stakeholders.
• Create and maintain technical documentation, operational procedures, deployment documentation, troubleshooting guides, and knowledge articles supporting endpoint management services.
• Provide technical guidance and assistance to Service Desk personnel, departmental technology staff, other UEM team members, and internal customers regarding endpoint management technologies and issues.
• Evaluate endpoint management technologies and identify opportunities to improve automation, reliability, security, user experience, and operational efficiency.
• Use modern productivity and AI-assisted tools, where appropriate, to improve scripting, documentation, troubleshooting, knowledge sharing, and operational efficiency.

Experience Requirements:

• Three (3) or more years of progressively responsible IT experience involving enterprise endpoint management, systems administration, desktop engineering, or related technologies.
• Hands‑on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM) in an enterprise environment.
• Experience supporting Windows 10/11 endpoint lifecycle activities, including operating system deployment or provisioning, patch management, software deployment, and troubleshooting.
• Experience packaging, deploying, and troubleshooting enterprise Windows applications.
• Proficiency with PowerShell scripting for endpoint administration, automation, troubleshooting, and remediation.
• Experience administering or supporting Active Directory and Group Policy in an enterprise environment.
• Working knowledge of enterprise endpoint security, configuration management, and vulnerability remediation practices.
• Experience troubleshooting endpoint issues across Windows operating systems, applications, networking, identity, and endpoint management technologies.
• Preferred: Five (5) or more years of IT experience in a large enterprise supporting 5,000+ users.
• Preferred: Experience with Microsoft Intune, co-management, Windows Autopilot, Microsoft Entra ID, and Apple Business Manager.
• Preferred: Experience with Endpoint Analytics, proactive remediations, compliance reporting, and patch reporting.
• Preferred: Experience supporting enterprise Windows OS upgrades or large-scale endpoint transformation initiatives.
• Preferred: Experience implementing endpoint configurations supporting PCI or other industry security and compliance requirements.
• Preferred: Microsoft certifications related to Endpoint Administration, Intune, Microsoft 365, or Azure/Entra.
• Preferred: Experience using AI-assisted administrative tools to improve scripting, documentation, troubleshooting, or operational efficiency.

Education Requirements:

• High School Graduate or Equivalent and five (5) years of related work experience; OR
• Two‑Year College Degree and three (3) years of related work experience; OR
• Bachelor's Degree and one (1) year of related work experience; OR
• Master's Degree; OR
• An equivalent combination of education and relevant experience that enables successful performance of essential duties.