Senior Endpoint Automation Engineer

Overview Senior Endpoint Automation EngineerLocation: Any MSA office in WI, IA, IL, MN or FLType: Full‑Time | Salaried | Remote/Hybrid/Onsite Based | Flex Time EligibleMSA Professional Services is seeking a Senior Endpoint Automation Engineer to modernize and optimize how technology is delivered and managed across our organization. This role is responsible for designing, automating, securing, and managing MSA’s endpoint ecosystem across on-premises and cloud environments, including Microsoft 365 and Azure.You’ll combine deep endpoint engineering expertise with automation to reduce manual support, standardize device management, and create a better technology experience for MSA employee-owners. From zero-touch provisioning and automated onboarding to endpoint security and lifecycle management, you’ll have the opportunity to identify opportunities, build scalable solutions, and help shape MSA’s endpoint automation strategy.This role can be onsite, hybrid or remote within driving distance of any of our offices in WI, IL, IA, MN or FL.MSA Professional Services is 100% employee-owned, meaning every employee has a direct stake in the success of the company. This ownership mindset drives our collaborative culture, long-term thinking, and commitment to delivering high-quality work for the communities we serve.Come join the ownership team at MSA!Employee Testimonial:"As an employee-owned company (100% ESOP), working at MSA is not just a job. We're genuine co-owners, and this ESOP setup promotes a culture of collaboration and engagement throughout MSA because we all have a direct financial interest as owners."-Project Engineer Transportation, Cedar Rapids Office Responsibilities Endpoint Engineering & AutomationDevelop and maintain MSA’s endpoint automation strategy, standards, and best practices, including provisioning, configuration, compliance, security, and lifecycle management.Administer and optimize endpoint technologies including Microsoft Intune, Autopilot, MECM/SCCM, PDQ, and JAMF, as applicable.Build and maintain PowerShell scripts, automated workflows, software deployments, patch management, and zero/low-touch solutions for onboarding, offboarding, device refreshes, and user migrations.Security, Governance & ModernizationMonitor endpoint health, performance, compliance, and security; troubleshoot complex issues and implement scalable solutions.Partner with MSA’s Security and Data Governance teams to incorporate security, compliance, and governance best practices into endpoint solutions.Research and implement emerging endpoint management and automation technologies that improve security, scalability, efficiency, and employee experience.Technology Partnership & SupportServe as an escalation point and technical resource for complex endpoint, automation, and device management issues.Partner with the Help Desk and business stakeholders to identify recurring challenges and develop automation, self-service, and process improvements.Develop technical documentation, standards, and implementation guides, and provide training to employees within and outside of IT as appropriate.Project LeadershipIdentify and lead projects that modernize MSA’s endpoint infrastructure, security, software, and automation capabilities.Collaborate with IT and business stakeholders to establish project requirements, priorities, and solutions while communicating progress throughout implementation.Lead technology modernization efforts and support organizational adoption, including after-hours maintenance, deployments, troubleshooting, and emergency support as needed. Qualifications EducationBachelor of Science degree in Information Science, Computer Science, a related field, or equivalent work experience requiredCertifications PreferredMicrosoft Endpoint Administrator Associate (MD-102)Identity and Access Administrator Associate (SC-300)Experience10+ years of experience in the Information Technology industry5+ years of experience in endpoint engineering, desktop systems engineering, or related rolesTechnical SkillsExpert knowledge of Microsoft Intune, MECM/SCCM, Windows Autopilot, and enterprise endpoint management platforms.Advanced knowledge of Windows, Microsoft 365, Entra ID, Active Directory, Group Policy, and endpoint security.Strong PowerShell scripting and automation experience, including software packaging, application deployment, patching, and configuration management.Experience with endpoint security and compliance, including security hardening, lifecycle management, and EDR technologies such as CrowdStrike Falcon.Experience designing zero/low-touch provisioning and automated endpoint processes, including onboarding, offboarding, device refreshes, and user migrations.Experience with Azure Automation, Power Automate, or similar platforms; familiarity with macOS and mobile device management is a plus.Leadership & CollaborationLead technology modernization initiatives and help drive adoption of new endpoint solutions and processes.Partner effectively with IT, business stakeholders, and leaders at all levels to identify needs and deliver scalable solutions.Work independently while collaborating across teams, taking ownership of priorities, decisions, and outcomes.Demonstrate strong communication, documentation, and knowledge-sharing skills with an eagerness to learn and openness to feedback.Why MSA100% employee‑owned firm with 100+ years of community impactCollaborative culture with in-house experts for all disciplines across the firmFlexible work‑life integrationOngoing learning and professional growth opportunities for all positionsCommitment to fostering a work environment where employees have a strong sense of inclusion and belongingIncluded on the "ENR Top 500 Design Firms" for over 27 straight yearsAdditional BenefitsEligible employees also receive a comprehensive benefits package, including:Compensation Range: $88,800 - $128,800 (commensurate with experience)Employee Stock Ownership Plan (ESOP) – As a 100% employee-owned company, eligible employees receive company shares at no costFlex Time: Work 42 hours this week? Have 2 hours added to your Flex Time balance to use as time off in the future401(k) Retirement Plan – Generous employer match that is immediately 100% vestedMedical, Dental & Vision Insurance for employees and eligible dependentsPaid Time Off – Minimum of 17 days in the first yearPaid Holidays – 8 holidays annuallyPaid Parental Leave – regardless of birth parentEmployer-Paid Insurance – Life, short-term disability, and long-term disability coverageShort-Term Incentive Program (STIP) – Annual performance-based bonus opportunityEqual Opportunity EmployerMSA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.MSA is committed to creating a diverse and inclusive workplace and encourages candidates from all backgrounds to apply.Reasonable Accommodation StatementIf you require a reasonable accommodation during the application or interview process, please contact View email address on click.appcast.io so we can assist you.Job SummaryCategory: ITJob Code: DJOBID: 2026-3248