Senior Endpoint Management Engineer

This is a fully remote position, open to applicants in Romania.

📋 Description

• Oversee, manage, and continuously enhance Microsoft Intune (Windows laptops, iPhones, iPads) alongside Kandji / IRU (Apple MacBooks).

• Take ownership of the entire device lifecycle: zero-touch enrollment via Apple Business Manager (ADE) and Windows Autopilot, configuration, app deployment, patching, and retirement.

• Establish and enforce configuration profiles, compliance policies, and baseline standards across all platforms and operating system versions.

• Maintain integrations throughout the broader tech stack: Microsoft 365, Microsoft Azure / Entra ID, Microsoft Defender, Cisco Meraki, and Zscaler.

• Recognize repetitive, manual, and error-prone tasks and automate them (e.g., Intune Proactive Remediations, scripting, Microsoft Graph API, Kandji automation).

• Lead and implement AI-driven automations — self-service, self-healing, automated remediation, and assisted support — to enhance the end-user experience and alleviate service desk workload.

• Achieve measurable results: fewer tickets, faster resolutions, and reduced manual interventions.

• Implement and uphold Zero Trust controls: Conditional Access, device compliance gating, encryption (BitLocker / FileVault), and least-privilege access.

• Manage endpoint threat protection through Microsoft Defender and ensure secure connectivity via Zscaler.

• Align endpoint configuration and evidence with regulatory and audit standards — ISO 27001, SOC 2, DORA, and GDPR — and assist with internal and external audits.

• Facilitate rapid, reliable, zero-touch onboarding, ensuring new employees are productive from day one.

• Proactively monitor device health and performance, resolving issues before users detect them.

• Serve as the senior escalation point for complex endpoint challenges raised by the service desk.

• Collaborate with IT Support, IT Operations, Security, and Infrastructure teams, maintaining clear ownership boundaries and escalation paths.

• Document standards, runbooks, and knowledge-base articles to empower the wider team.

• Monitor and report on endpoint KPIs (compliance rate, patch coverage, enrollment success, ticket deflection) and drive continuous improvement.

⛳️ Requirements

• **Must Have**

• 3–5 years of practical experience administering MDM / endpoint management platforms in an enterprise setting.

• Demonstrated proficiency with Microsoft Intune across Windows and iOS / iPadOS, as well as macOS management via Kandji (or a similar Apple MDM like Jamf).

• Strong expertise in Apple Business Manager, Automated Device Enrollment (ADE), and Windows Autopilot.

• Comprehensive knowledge of Microsoft 365 and Microsoft Entra ID (Azure AD), including Conditional Access and compliance policies.

• Scripting and automation capabilities (PowerShell, Bash, and/or Microsoft Graph API).

• Practical understanding of endpoint security and compliance within a regulated environment.

• **Preferred / Nice to Have**

• Relevant certifications: Microsoft 365 Certified: Endpoint Administrator Associate (MD-102), Apple, or Kandji certifications.

• Hands-on experience with Microsoft Defender, Cisco Meraki, and Zscaler.

• Experience implementing AI tools (e.g., Copilot, AI-assisted scripting or support agents) in IT operations.

• Previous experience in fintech, financial services, or another regulated industry (ISO 27001 / SOC 2 / DORA / GDPR).

• **Who You Are**

• Proactive — you foresee potential issues and address root causes rather than merely responding to tickets.

• A team player — you collaborate openly, share insights, and enhance the entire team.

• Forward-thinking — genuinely enthusiastic about automation and AI as means to streamline IT processes.

• Security-focused — you prioritize security by default, with the discernment to balance protection and usability.

• A clear communicator — adept at engaging with both technical peers and non-technical end users.

🏝️ Benefits

• Collaborate with some of the most brilliant minds in the industry on an exciting journey to redefine the ever-changing financial landscape.

• Experience an environment that combines the agility, passion, and energy of a startup with the established expertise, strong market presence, and extensive customer network of a well-established organization.

• At SAP Fioneer, you will flourish in a flexible work environment that nurtures creativity and encourages you to think outside traditional boundaries, bringing innovative ideas to life and challenging the status quo. Here, you will join a diverse, globally connected team that we take great pride in — a team that is continually growing and innovating.

• As part of our workforce, you will have the chance to shape your own career trajectory while enjoying competitive compensation packages and advancement opportunities based solely on your contributions.