Endpoint Engineer III

Hybrid role - 3 days Onsite and 2 days Remote

Job Description:

• This is a 12-month contract and the role will be on the hybrid schedule 3 days a week.
• We are seeking a Sr. Endpoint Engineer to join the Global IT Endpoints team.
• This role is responsible for designing, implementing, and maintaining modern endpoint management solutions for our global fleet of Windows devices.
• The ideal candidate will combine deep technical expertise with a business-focused mindset to deliver secure, reliable, and scalable endpoint solutions that support client’s mission of driving innovation in data storage technology.
• This position will play a critical role in shaping and delivering a secure, modern, and efficient endpoint experience for thousands of employees worldwide.
• This role combines deep technical expertise with a passion for innovation, automation, and user experience.

Key Responsibilities:

Modern Endpoint Management:

• Architect, implement, and optimize Microsoft Intune and MECM solutions to manage client’s global fleet of Windows endpoints.
• Translate existing Group Policy Objects (GPOs) into scalable, cloud-native Intune configuration and compliance policies.

Windows Deployment & Lifecycle:

• Oversee deployment and maintenance of Windows 10/11 images using Autopilot, ensuring zero-touch provisioning for global users.
• Define lifecycle standards for endpoint hardware and software in collaboration with Global IT leadership.

Application & Patch Management:

• Automate deployment of applications, patches, and drivers across endpoints to ensure enterprise-wide consistency.
• Design, implement, and support 3rd-party patching leveraging solutions such as PatchMyPC.
• Administer software distribution, desktop security, firmware updates, and remote support tools to support endpoint efficiency.
• Define servicing plans that keep clients current while balancing stability, security, and business requirements.

Security & Compliance:

• Implement security baselines and Defender for Endpoint policies to safeguard devices against threats.
• Ensure compliance with client’s global security frameworks, IT controls, and regulatory requirements.

Automation & Scripting:

• Develop and maintain PowerShell scripts to automate endpoint management, reporting, and system administration.
• Leverage scripting for remediation tasks, user provisioning, and compliance enforcement.

Escalation & Troubleshooting:

• Serve as Tier 3 escalation point for complex Operating System (OS), application, and endpoint hardware issues.
• Partner with IT Service Desk, Deskside Support, and regional IT teams to rapidly resolve issues and improve root-cause analysis.

Cross-Functional Collaboration:

• Work with Security, Networking, and Cloud teams to align endpoint strategy with client’s enterprise architecture.
• Participate in architectural discussions, cross-functional infrastructure projects, and digital workplace initiatives.

User Experience & Documentation:

• Improve user productivity by ensuring frictionless onboarding, provisioning, and device management.
• Create and maintain technical documentation, standard operating procedures (SOPs), and training material for the Endpoint team.

Continuous Improvement:

• Drive a continual service improvement culture, leveraging R&D, validation, and pilot programs to modernize endpoint services.
• Support the enterprise-wide rollout of Windows 11 and future endpoint innovation programs, such as the rollout of Digital Experience Monitoring (DEX) solutions.

Key Skills & Qualifications:

Technical Expertise:

• Deep knowledge of Windows 10/11, Microsoft Intune, MECM (SCCM), Windows Autopilot, Azure AD / Entra ID, and Microsoft 365 ecosystem.
• Deep experience with Application Packaging, Software Distribution, OS Patching, 3rd Party Applications Patching, Imaging, and modern endpoint management.
• Advanced PowerShell scripting experience (preferably using PowerShell App Deploy Kit); knowledge of AppleScript/Bash for Mac device integration is a plus.
• Demonstrated experience in architecting and deploying solutions for large enterprise endpoint environments (20k+ endpoints).
• Strong understanding of enterprise security baselines, endpoint hardening, and compliance frameworks.
• Familiarity with Jamf Pro for macOS/iOS management is helpful but not required.

Enterprise & Infrastructure Knowledge:

• Experience with hybrid identity management (Azure AD/Entra ID, Group Policy, Conditional Access).
• Solid knowledge of global IT infrastructure environments, including networks, enterprise security suites, device lifecycle management, and SaaS/O365 applications.

Soft Skills & Leadership:

• Excellent communication and cross-functional collaboration skills.
• Ability to provide mentorship to junior engineers and partner with leadership on strategic initiatives.
• Strong organizational skills with the ability to prioritize and lead multiple projects simultaneously.

Education & Certification:

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field. Equivalent work experience considered.
• 4+ years managing Intune and MECM/SCCM in enterprise environments at scale.
• 4+ years with endpoint lifecycle management, patching, compliance, and application delivery.

Preferred certifications:

• Microsoft Certified: Intune Expert, Endpoint Administrator Associate, or equivalent.
• Jamf 300/400 certification (a plus but not required).
• ITIL Foundation certification or IT Service Management knowledge.

About us:
At our organization, we take our mission and values to heart! We are on a mission to offer more and better jobs all over the world! Our goal is to care for you while you care for our clients and get you paid the highest pay possible. All our associates working with us are expected to embrace our RACE values: R - Results Matter, A- Approachable, C - Care, and E - Emergency i.e. work with a sense of urgency.

For more relevant job opportunities please visit our website:  Denken Solutions Careers