Senior Endpoint Engineer

Provide hands‑on technical leadership, architecture, design review, and practical guidance without formal direct‑report or performance‑management responsibility.
Establish platform priorities, service ownership, technical standards, cross‑training, escalation coverage, and an executable roadmap.
Serve as technical authority and senior escalation point for enterprise endpoint management.
Own endpoint engineering documentation, change control, testing and rollback standards, support handoffs, knowledge transfer, and cross‑training.
Establish service metrics and use operational reviews to drive reliability, security, and continuous improvement.
Define and maintain Windows endpoint standards, configuration profiles, security baselines, compliance policies, assignment groups, role‑based access, and policy exceptions.
Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre‑provisioning, reset, redeployment, and zero‑touch workflows.
Design enrollment and migration patterns for Microsoft Entra join, hybrid Entra join, automatic MDM enrollment, and legacy‑device transition.
Own enterprise management of Mac, iPhone, and iPad devices through Microsoft Intune and Apple Business Manager.
Own the application packaging lifecycle in Intune, including Win32 packages, PSADT, detection rules, dependencies, supersedence, testing, assignments, remediation, and retirement.
Use Patch My PC to publish and maintain third‑party and specialized applications through Intune.
Develop delivery patterns for large and specialized AEC applications, including Autodesk AutoCAD and Bentley products.
Manage Windows Autopatch and update‑ring strategy; monitor results and remediate failures and policy exceptions.
Build and maintain PowerShell, Microsoft Graph, proactive‑remediation, API‑based, and governed AI‑assisted automation.
Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security policies, and vulnerability remediation.
Develop dashboards and reports for enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation performance.
Maintain authoritative endpoint inventory across identity, device‑management, service‑management, procurement, and vendor systems.
Set standards for endpoint models, warranties, leasing, refresh, recovery, reuse, retirement, and secure disposition.
Own architecture, standards, lifecycle, monitoring, documentation, and vendor coordination for Microsoft Teams Rooms.
Govern Trilon's copier and plotter fleet, including standards, vendors, secure configuration, firmware, lifecycle, inventory, metrics, and replacement strategy.
Use monitoring, service data, root‑cause analysis, automation, and runbooks to improve workplace technology reliability and user experience.
Lead endpoint discovery, assessment, planning, and migration for newly acquired firms.
Define phased integration plans and partner on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations.
Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders.

Requirements

• 7 or more years of endpoint management, systems engineering, or modern workplace experience, including hands‑on responsibility for managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment.
• Demonstrated technical leadership, sound judgment, ability to influence technical peers, establish standards, coordinate across teams, and communicate clearly without formal reporting authority.
• Expert‑level hands‑on experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture.
• Strong experience with enterprise software packaging and delivery, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations; PSADT experience strongly preferred.
• Experience with Windows Autopatch or equivalent update‑ring governance and third‑party application and patch automation; Patch My PC experience strongly preferred.
• Advanced PowerShell skills and practical experience using Microsoft Graph or other APIs for automation, reporting, and operational controls.
• Strong understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation.
• Experience supporting complex, distributed environments and integrating endpoint operations during mergers, acquisitions, or tenant/domain transitions.
• Ability to reconcile data across device‑management, identity, asset, remote‑support, and service‑management systems; experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement.
• Strong hands‑on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager.
• Experience engineering or governing Microsoft Teams Rooms is strongly preferred.
• Experience governing an enterprise copier, printer, or plotter fleet is preferred.
• Experience with endpoint equipment warehousing and depot operations is preferred.
• Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, is preferred.

Core Competencies

Demonstrates expert‑level proficiency in Microsoft Intune and Windows Autopilot for endpoint management, with a strong focus on architecture, compliance, and automation. Capable of leading technical initiatives, establishing standards, and driving continuous improvement in a complex enterprise environment.

Highest‑signal resume keywords

• Microsoft Intune Management
• Windows Autopilot Architecture
• PowerShell Automation
• Enterprise Software Packaging
• Endpoint Security Compliance

Hard Skills

• Endpoint Management
• Systems Engineering
• Windows 11
• Microsoft Entra ID
• PSADT Experience
• Patch My PC
• Autodesk AutoCAD Packaging
• Bentley Products Packaging
• Windows Autopatch Governance
• API‑Based Automation

Soft Skills

• Technical Leadership
• Clear Communication
• Influencing Technical Peers
• Sound Judgment
• Cross‑Team Coordination

Industry Keywords

• Endpoint Policy Architecture
• Device Management
• Asset Governance
• Vendor Coordination
• Hardware Lifecycle Management

Tools & Technologies

• Microsoft Graph
• Microsoft Defender for Endpoint
• BitLocker
• Windows LAPS
• Conditional Access
• Apple Business Manager
• Microsoft Teams Rooms
• Monitoring Tools
• Service Management Systems
• Root‑Cause Analysis