Workstation and Endpoint Engineer

Position: Workstation and Endpoint Engineer Location: 330 Rush Alley suite 500 Columbus, OH Job Id: 1129 # of Openings: 1 Formed in 1934, Telhio began as a credit union for Columbus Telephone Company (now AT&T) employees. Telhio now serves over 70,000 member-owners throughout central and southwest Ohio. As one of the largest credit unions in Ohio, Telhio is a strong financial institution that continues to serve its members through extraordinary service, innovative financial solutions and community involvement. After generations of service and growth, we never lose focus of our three core values - Caring, Commitment, and Integrity. Position Summary The Workstation and Endpoint Engineer is responsible for the engineering, administration, governance, lifecycle management, and continuous improvement of Telhio Credit Union’s endpoint computing environment and workplace technology ecosystem. This position owns Microsoft Intune and ManageEngine capabilities supporting device administration, the configuration management database (CMDB), hardware and software asset management, software licensing, branch technology, and secure employee collaboration. The role is highly hands-on and combines engineering, field support, process discipline, scripting, documentation, and experimentation with AI to improve service quality, security, accuracy, and operational efficiency. Responsibilities Endpoint Engineering & Microsoft Intune Administration Create and maintain a standardized build plan for new and existing devices using Microsoft Intune and ManageEngine. Fully configure Windows workstations with Telhio’s approved operating system, standard applications, vendor applications, security software, policies, and configurations. Use Intune to install, configure, update, and uninstall Windows components and workstation applications. Identify differences in Windows components, Microsoft software, third-party applications, and vendor-provided software across the workstation fleet; test and execute required upgrades and remediation. Package, test, deploy, upgrade, roll back, and retire workstation software using Intune, ManageEngine, PowerShell, and other approved tools. Write and continuously improve login scripts, software installation scripts, software removal scripts, and workstation maintenance automation. Develop scripts and automated processes to remove unsupported software and install approved replacement software. Maintain endpoint configuration standards, software baselines, deployment procedures, and build documentation. CMDB, Hardware Asset & Configuration Management Own and maintain the enterprise CMDB created in ManageEngine. Perform asset discovery and asset tagging using ManageEngine tools and approved physical tagging methods. Maintain accurate hardware inventory records, including asset owner, user, location, status, configuration, warranty, support, and lifecycle information. Review CMDB metrics and reconciliation reports, identify differences or missing records, investigate root causes, and resolve data-quality issues. Maintain relationships among assets, users, locations, software, services, and supporting infrastructure where applicable. Establish repeatable controls for asset intake, assignment, movement, return, repair, replacement, retirement, and disposal. Document CMDB standards, required fields, reconciliation procedures, exception handling, and governance expectations. Hardware Lifecycle, Acquisition & Disposal Identify hardware approaching manufacturer end of life or end of support and assess associated operational and security risk. Develop and maintain prioritized replacement plans and budgets for workstations, peripherals, displays, branch devices, and network equipment. Acquire, stage, deploy, replace, update, track, sunset, sanitize, and dispose of hardware in accordance with Telhio policy and regulatory requirements. Coordinate device moves, branch refreshes, office relocations, and technology installations. Maintain appropriate spares and replacement inventory to support operational continuity. Software Asset & License Management Develop, implement, and manage a formal Software Asset Management and software license management function. Maintain software entitlement, contract, assignment, installation, utilization, renewal, and retirement records. Reconcile installed software against approved products and available license entitlements. Identify unsupported, duplicate, unused, unapproved, or noncompliant software and coordinate corrective action. Produce license and software inventory reporting that supports renewals, budgeting, vendor reviews, audits, and optimization decisions. Maintain an approved software catalog and software lifecycle standards. Microsoft 365 & Digital Workplace Administration Administer and support SharePoint Online sites, including site lifecycle, ownership, permissions, governance, storage, and user support. Administer and support OneDrive for Business, including provisioning, synchronization, storage, recovery, retention support, migration, and troubleshooting. Administer and support Microsoft Teams, including team lifecycle, ownership, permissions, policies, collaboration, meetings, and user support. Coordinate Microsoft 365 configuration and access controls with IT Operations and Information Security. Administer and support the Credit Union’s VPN and virtual desktop infrastructure (VDI) environment. Maintain secure endpoint and remote-access configurations aligned with Telhio’s Zero Trust network strategy. Troubleshoot device compliance, authentication, connectivity, application delivery, profile, and performance issues affecting remote users. Support identity- and device-based controls involving Intune, Entra ID, Microsoft Defender, Conditional Access, VPN, VDI, and Microsoft 365 in partnership with Information Security and IT Operations. Branch, Back Office & Physical Workplace Technology Install, configure, maintain, move, replace, and troubleshoot workstations and technology devices at branches, back-office departments, and remote locations. Maintain branch and back-office peripherals, including check scanners, signature pads, receipt printers, and other specialized devices. Install, configure, move, maintain, and replace televisions and related display equipment at all Telhio locations as needed. Administer and maintain In Lighten advertising devices and associate workstation, network, display, and content-delivery dependencies. Administer and maintain Win-Pak and Virtual Keypad software and coordinate support of associated physical-security technology with Facilities, Security, and vendors. Maintain accurate CMDB and lifecycle records for branch devices, displays, digital-signage equipment, and physical-security system components. Network Equipment & Field Services Acquire, inventory, stage, configure, replace, update, and coordinate installation of network equipment in partnership with the IT Operations Engineer. Travel to branches and other remote locations to install, maintain, relocate, troubleshoot, and retire devices and equipment. Coordinate vendor visits, cabling, equipment delivery, installation windows, and site readiness when required. Ensure all equipment changes are documented and reflected in the CMDB. Security, Vulnerability & Exploit Reduction Assist the IT Operations Engineer and Information Security team with vulnerability remediation and exploit reduction activities affecting endpoints and workplace technology. Remediate vulnerable, unsupported, or misconfigured workstation software and components. Support endpoint hardening, security baselines, patching, device compliance, and Microsoft Defender activities. Validate remediation results and maintain evidence and documentation required for operational, audit, and regulatory review. Documentation, Automation & AI-Enabled Improvement Create, maintain, test, and improve technical procedures, build standards, scripts, support documentation, inventories, diagrams, and operational runbooks for all assigned responsibilities. Identify manual, repetitive, error-prone, or poorly controlled activities and redesign them using scripting, workflow automation, standardization, and self-service where appropriate. Willingly experiment with AI and AI agents to improve workstation management, CMDB administration, asset reconciliation, software deployment, license management, documentation, reporting, and operational decision-making. Use controlled testing, human validation, security review, and documented change management when introducing automation or AI-enabled capabilities. Share knowledge with the Service Desk and IT Operations teams and provide Tier 2 / Tier 3 escalation support for complex endpoint and workplace-technology issues. What you will need Preferred Certifications Microsoft 365 Administrator Expert ITIL Foundation CompTIA Security+ Certified Hardware Asset Management Professional (CHAMP) or Certified Software Asset Manager (CSAM) Lean Six Sigma Agile certification Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field (Preferred). Equivalent education, technical training, certifications, and relevant experience may be considered. Five or more years of progressive experience in endpoint engineering, workstation administration, IT asset management, Microsoft 365 administration, or a comparable enterprise technology role. Demonstrated hands-on experience administering Microsoft Intune and managing Windows 11 devices in an enterprise environment. Demonstrated experience maintaining a CMDB, reconciling asset records, and managing hardware lifecycle activities. Experience with ManageEngine assets, endpoint, service management, or CMDB capabilities. Experience writing and maintaining production PowerShell and Windows login scripts. Experience packaging, installing, upgrading, and removing Microsoft, third-party, and vendor applications. Experience supporting distributed offices, branches, or other remote locations. Experience administering SharePoint Online, OneDrive for Business, Microsoft Teams, VPN, and VDI environments. Telhio Applicants must be able to pass a background check including Credit, Drug Screen, Bondability, and Criminal Background. Core Competencies Hands-on technical ownership Analytical troubleshooting and root cause analysis Asset and data-management discipline Automation and continuous improvement Clear technical documentation Planning, prioritization, and follow-through Customer-focused communication Cross-functional collaboration Curiosity and responsible experimentation with AI What you will earn Competitive pay Benefits: several medical plan options, dental, free vision, free life and free disability insurance Matching and immediately vested 401(K) plan Generous schedule for paid holidays, vacation and personal time for a healthy work-life balance Opportunity for personal career growth, continued education and mentorship programs Volunteer opportunities impacting the local community Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, you will need to have good manual dexterity as well as speaking and hearing ability. This position requires sitting; some reaching; standing; some stooping or kneeling. The employee must occasionally lift and move up to 50 pounds. It is expected that the employee will read, compile, compute and record numerical and statistical data. Must drive occasionally. This is a Non-Collective Bargaining Unit Telhio is an Equal Opportunity Employer #J-18808-Ljbffr Telhio Credit Union