Endpoint & Network Engineer

Endpoint And Network Engineer

Founded in 2008, Hightower is a wealth management firm that provides investment, financial and retirement planning services to individuals, foundations and family offices, as well as 401(k) consulting and cash management services to corporations. Hightower's capital solutions, operational support services, size and scale empower its vibrant community of independent-minded wealth advisors to grow their businesses and help their clients achieve their financial vision. Based in Chicago with advisors across the U.S., we operate as a registered investment advisor (RIA).

You will join the Infrastructure and End User Computing team, working closely with network, security, and cloud engineering partners. This role serves as a bridge between endpoint engineering and network operations, acting as an escalation point for Service Desk and collaborating across teams to deliver a secure and seamless end user experience.

As an Endpoint and Network Engineer, you will be responsible for delivering a secure, modern end user computing experience while supporting core network infrastructure and connectivity in a cloud first environment.

• Design, deploy, and manage endpoint solutions using Microsoft Intune across Windows, macOS, iOS, and Android
• Administer Microsoft 365 including device compliance, conditional access, and endpoint security policies
• Manage the endpoint lifecycle including provisioning, patching, compliance, and decommissioning
• Support and optimize Box and collaboration tools
• Implement endpoint security controls aligned with Zero Trust principles
• Troubleshoot complex device, operating system, and application issues
• Support and maintain Cisco Meraki infrastructure including firewalls, switches, wireless, and SD WAN
• Assist with Cisco Secure Client including VPN, Zero Trust Access, Umbrella, and Duo Desktop
• Troubleshoot connectivity issues across LAN, WAN, VPN, and cloud environments
• Support Webex collaboration infrastructure
• Work with AWS hosted network appliances such as Meraki, ISE, and Catalyst virtual routers
• Support secure access initiatives aligned with Zero Trust architecture
• Monitor and respond to endpoint and network security events
• Serve as an escalation point for Service Desk
• Document systems, configurations, and standard operating procedures
• Collaborate with infrastructure, security, and cloud teams to improve reliability and user experience

3 to 6 years of experience in endpoint engineering, desktop engineering, or EUC roles

• Strong hands on experience with Microsoft Intune or Endpoint Manager
• Experience managing Windows and macOS environments, mobile platform experience preferred
• Solid understanding of networking fundamentals including DNS, DHCP, TCP IP, and VPNs
• Experience with Cisco Meraki or similar networking platforms
• Familiarity with Microsoft 365 ecosystem
• Working knowledge of endpoint security and compliance frameworks
• Experience with Cisco Secure Client, Umbrella, Duo, or SSE platforms preferred
• Exposure to AWS networking or cloud hosted infrastructure preferred
• Experience with Zero Trust architecture preferred
• Scripting experience such as PowerShell or Bash is a plus

Coverage on the first day of employment for medical, dental, and vision insurance

• Paid parental leave (16 weeks for primary caregiver and 8 weeks for secondary caregiver)
• Mother's lounge onsite
• Flexible PTO plan
• In office Monday through Thursday and work from home on Fridays
• Free gym in the Chicago office
• 401k matching plan
• HSA employer contributions
• Student loan assistance
• Pet insurance
• Base salary of $80,000 to $90,000 plus discretionary bonus (exact base salary dependent on experience)

Hightower is an equal opportunity employer and does not discriminate based upon race, color, religion, sex, sexual orientation, pregnancy, marital status, national origin, citizenship, veteran status, ancestry, age over 40, physical or mental disability, medical condition, gender identity or expression, genetic information, or any other consideration made unlawful by applicable law.

You are a U.S. citizen, U.S. permanent resident or possess other unrestricted U.S. work authorization and will not require sponsorship now or in the future.