Compliance & Automation Engineer

Job Description The Compliance and Automation Engineer is responsible for highly complex activities related to enterprise endpoint management, mobile device management (MDM), and mobile application management (MAM) using Microsoft Intune and the broader Microsoft 365 ecosystem. These activities include the design, deployment, configuration, and ongoing maintenance of Intune policies, compliance frameworks, and device enrollment workflows across Windows, macOS, iOS, and Android platforms. The role works closely with the Information Security Team to enforce security baselines, remediate vulnerabilities, and ensure devices meet organizational compliance standards. Responsibilities Provide Tier III support for endpoint management issues across IT Operations and IT Development Teams Design, deploy, and maintain Microsoft Intune policies for device configuration and compliance Manage device enrollment across Windows Autopilot, Apple Business Manager, and Android OS devices Administer and maintain Microsoft Endpoint Configuration Manager (MECM/SCCM) and co‑management configurations Manage, monitor, and maintain Azure Active Directory (Entra ID), including device registration, Hybrid Azure AD Join, and identity‑based access controls Design and maintain enterprise application packaging workflows, including Win32 app packaging, MSIX/AppX conversion, and LOB app deployment through Intune and MECM Manage the full application lifecycle from packaging and testing to staged deployment and ongoing maintenance Develop and maintain PowerShell and scripting solutions to automate application packaging, deployment, and reporting Enforce and maintain security baselines, CIS benchmarks, and compliance policies across managed endpoints Remediate security vulnerabilities in conjunction with the Information Security Team Manage Windows Update for Business and Windows Auto Patch to ensure compliance reporting numbers are accurate Work with vendors to evaluate and deploy new endpoint management solutions Qualifications Bachelor’s degree in information technology; equivalent combination of experience and education may substitute on a year‑for‑year basis 3+ years of experience managing Windows10/11 enterprise deployments, including Autopilot 3+ years of experience designing, deploying, and managing Microsoft Intune in an enterprise environment 3+ years of hands‑on experience with enterprise application packaging, including Win32, MSIX/AppX, MSI, and all other formats 2+ years of experience with Microsoft Endpoint Configuration Manager (MECM/SCCM) and co‑management 2+ years of experience with Azure Active Directory / Microsoft EntraID Extensive experience with PowerShell scripting for packaging automation, silent installs, and deployment troubleshooting Extensive experience with PowerShell App Deployment Toolkit (PSADT) for enterprise application packaging, deployment scripting, and end‑user interaction management 2+ years of experience with Microsoft365 security and compliance tooling (Defender for Endpoint, Purview, etc.) Preferred experience managing macOS, iOS, and Android devices through Intune Preferred Microsoft certifications (MD‑102, MS‑102, SC‑300, or equivalent) Preferred soft skills: self‑motivated, team‑oriented, strong communication, interpersonal, organizational skills, detail oriented, problem‑solving, sense of urgency, commitment to quality customer service, data analysis; familiarity with ITIL concepts or certification preferred Additional Requirements 5% travel may be required. Physical Demands This role is performed in an office environment where a computer, telephone and other office equipment are used as needed to perform the duties of the role. The role may need to access areas within the building that are undergoing renovations which may contain jobsite hazards. Occasionally this role will be required to push, pull, bend, lift and move up to 25lbs. Benefits MiTek has a best‑in‑class competitive Total Rewards package that supports employees on many levels, including protection, formal education, financial wellness tools, a recognition platform, and generous healthcare, disability and retirement plans. Equal Employment Opportunity MiTek is an E‑Verify and Drug and Tobacco‑Free Workplace. We are an equal‑opportunity employer; and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, national origin, ethnicity, physical or mental disability, sex (including pregnancy, sexual orientation, gender identity or expression, or transgender status), age (40 and over), genetic information (including family medical history), veteran status, or any other protected characteristic. #J-18808-Ljbffr MiTek Industries