Senior Endpoint Engineer

This is a fully remote position, open to applicants in Florida, +2 more states.

📋 Description

• Manage and oversee Microsoft Intune and enterprise endpoint management systems for Windows workstations and servers.

• Administer and provide support for enterprise RMM solutions.

• Oversee and maintain enterprise network monitoring solutions.

• Handle endpoint environments with over 1,000 devices across office, data center, and remote workforce settings.

• Design, construct, test, document, and deploy application packages and software updates.

• Create and manage installation packages for Adobe, Microsoft Office, MSI, PowerShell, batch, and unattended installations.

• Plan and implement operating system deployments, feature upgrades, application rollouts, patching, and endpoint lifecycle operations.

• Develop automation and remediation scripts.

• Establish and uphold endpoint security configurations in accordance with CIS Benchmarks and DISA STIGs.

• Configure, manage, and troubleshoot Windows Defender Firewall and other host-based firewall controls.

• Collaborate with Information Security to address vulnerabilities, manage configuration drift, and enhance endpoint hardening.

• Diagnose complex Windows issues related to permissions, Group Policy, registry settings, COM/DCOM components, services, drivers, application dependencies, and operating system performance.

• Analyze and resolve installation failures, patching errors, upgrade issues, compliance exceptions, and endpoint security challenges.

• Monitor and report on endpoint health, inventory, compliance, patch status, deployment success, and configuration baselines.

• Create and maintain technical documentation, standard operating procedures, deployment standards, runbooks, and system diagrams.

• Lead or assist in technology refreshes, operating system migrations, application modernization, endpoint platform enhancements, and cloud management projects.

• Work with vendors and internal teams to assess, implement, and support endpoint technologies.

• Act as an escalation point for complex endpoint incidents and provide technical mentorship.

• Adhere to change management and Change Advisory Board protocols.

• Engage in on-call rotation and perform periodic evening or weekend work for maintenance, deployments, upgrades, and emergency troubleshooting.

⛳️ Requirements

• Extensive experience managing Microsoft Intune in an enterprise setting.

• Familiarity with RMM platforms such as BigFix, Automox, Ivanti, NinjaOne, or similar solutions.

• Proven experience managing Microsoft Windows workstation and server environments with over 1,000 endpoints.

• Expertise in application packaging, software deployment, operating system deployment, patch management, and endpoint lifecycle management.

• Strong knowledge of MSI packaging, MST transforms, silent installation switches, detection logic, dependencies, supersedence, and rollback planning.

• Proficiency in PowerShell scripting, automation, and systems administration.

• Understanding of endpoint security controls, vulnerability remediation, operating system hardening, CIS Benchmarks, and DISA STIGs.

• Advanced troubleshooting capabilities concerning Windows, Active Directory, Microsoft Entra ID, Group Policy, file permissions, registry settings, services, and COM components.

• A Bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field is preferred.

• At least five years of progressively responsible experience in enterprise endpoint engineering or endpoint management is required.

• Experience managing Microsoft Intune and Windows environments with 1,000 or more endpoints is strongly preferred.

• Equivalent combinations of education, technical training, certifications, and relevant professional experience may also be considered.

• Certifications in Microsoft endpoint, Azure, Windows Server, security, or IT service management are preferred but not mandatory.

• Participation in an on-call rotation and occasional evening or weekend work is required.

• Minimal travel may be necessary.

• Ability to communicate effectively and comprehend technical documentation and on-screen information.

• Capability to lift and move equipment weighing up to 25 pounds.

🏝️ Benefits

• Paid Time Off (PTO)

• Medical, Dental & Vision coverage

• Employee Assistance Program

• Flexible Spending Account

• Health Savings Account

• Paid Holidays

• Company-paid Life Insurance

• Matching 401(k) Plan

• Remote work environment

• Opportunities for technical mentorship and task leadership