Staff Endpoint Engineer - Desktop

About Marvell

Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities. 

At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead. 

Your Team, Your Impact

The Staff Endpoint Engineer is a seasoned endpoint expert who owns
the design, deployment, and support of Marvell's endpoint estate, with Windows and mobile device management as co-primary responsibilities and macOS, enterprise print, VDI, and Linux as secondary responsibilities. Drawing on specialized depth and breadth of expertise, the professional sets endpoint
standards and baselines, drives complex cross-platform initiatives, anticipates and prevents issues, and is recognized as a go-to expert within the endpoint engineering team or department.

Beyond hands-on engineering, the professional applies innovative solutions to complex problems, mentors less-experienced staff, and partners with security, identity, networking, and service delivery to shape how endpoints are managed enterprise-wide. Works independently and receives guidance only in the most complex situations.

What You Can Expect

Primary Platforms: Windows and Mobile

• Design, configure, and maintain Windows endpoint management through SCCM and Intune co-management, including application deployment, OS imaging, and patch management
• Own mobile device management through Intune (iOS and Android), covering MDM and MAM, app protection, enrollment programs (Apple Business Manager, Android Enterprise), and the full device lifecycle across corporate and BYOD
• Lead zero-touch provisioning across the fleet: Windows Autopilot and mobile automated enrollment
• Develop and maintain enterprise application packages (MSI, MSIX, Win32) and mobile application deployments

Secondary Platforms: macOS, Print, VDI, Linux

• Support macOS management through Jamf Pro, including Apple Business Manager enrollment, configuration profiles, and security baselines
• Support and help modernize enterprise print (Printix, MFP fleet, print servers), VDI provisioning and endpoint support, and the Linux endpoint estate (RHEL and Ubuntu; patching, hardening, 802.1x EAP-TLS)

Standards, Security, and Digital Experience

• Set endpoint standards, baselines, and OS lifecycle and patch strategy across platforms, leading with Windows and mobile
• Manage device compliance, conditional access, and security baselines; integrate endpoint security tooling (CrowdStrike Falcon) and support vulnerability posture (Qualys); partner with identity on Okta and Entra
• Use Nexthink (DEX) to proactively detect and resolve endpoint health issues, and define and report endpoint KPIs that drive continuous improvement

Automation, Improvement, and Mentorship

• Automate configuration, remediation, and reporting with PowerShell, and with Bash or Python for macOS and Linux
• Own runbooks, SOPs, and knowledge management; drive continuous service improvement and predict and prevent recurring issues
• Serve as the senior escalation point for complex endpoint issues, and mentor earlier-career engineers as a recognized domain expert

What We're Looking For

• Bachelor's degree in Business, Science, Arts, or a related field and 3-5 years of related professional experience; or a Master's degree and/or PhD with 2-3 years; including substantial hands-on endpoint engineering experience
• Deep, hands-on Windows endpoint engineering with SCCM and Intune co-management (application deployment, OS imaging, patch management)
• Deep, hands-on mobile device management with Intune across MDM and MAM (iOS and Android enrollment, app protection, compliance, lifecycle). Windows and mobile depth are both required; this is a co-primary role, not Windows with light mobile exposure
• Experience with zero-touch provisioning: Windows Autopilot and mobile automated enrollment (Apple ADE, Android Enterprise)
• Proficiency in PowerShell for automation, remediation, and reporting
• Software packaging and deployment for Windows (MSI, MSIX, Win32) and mobile applications
• Experience with Nexthink or a comparable DEX platform
• Solid understanding of Active Directory, Group Policy, endpoint security baselines, and identity-aware access (Conditional Access)
• Working knowledge across the secondary domains (macOS and Jamf, print, VDI, Linux) with the willingness to own them
• Works independently and receives guidance only in the most complex situations; drives complex projects requiring an in-depth evaluation of variable factors to predict problems and recommend innovative solutions; acts as a team lead who coordinates the activities of other team members; leads major incidents; and mentors less-experienced engineers

Preferred Qualifications:

• Microsoft 365 Certified: Administrator Expert (Expert-tier; the senior target for this role), built on the Endpoint Administrator Associate (MD-102) foundation
• Jamf certification (Jamf Certified Tech or Admin); enterprise mobility credentials (Apple Business Manager, Android Enterprise)
• Experience managing a globally distributed Windows and mobile fleet at enterprise scale
• Familiarity with the surrounding stack: ServiceNow (CMDB and ITSM), CrowdStrike Falcon, Okta and Entra, Qualys, and enterprise print (Printix)
• Scripting and automation beyond PowerShell (Bash, Python); mobile threat defense (MTD); VDI (Citrix, VMware Horizon, or Azure Virtual Desktop); RHCSA; CompTIA Security+; ITIL Foundationv4
• Experience supporting semiconductor, manufacturing, lab, or regulated-industry environments

Expected Base Pay Range (USD)

88,110 - 132,000, $ per annum

The successful candidate’s starting base pay will be determined based on job-related skills, experience, qualifications, work location and market conditions. The expected base pay range for this role may be modified based on market conditions.

This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success.

Additional Compensation and Benefit Elements 

Marvell is committed to providing exceptional, comprehensive benefits that support our employees at every stage - from internship to retirement and through life’s most important moments. Our offerings are built around four key pillars: financial well-being, family support, mental and physical health, and recognition. Highlights include an employee stock purchase plan with a 2-year look back, family support programs to help balance work and home life, robust mental health resources to prioritize emotional well-being, and a recognition and service awards to celebrate contributions and milestones. We look forward to sharing more with you during the interview process.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.

Any applicant who requires a reasonable accommodation during the selection process should contact Marvell HR Helpdesk at [email protected].

Interview Integrity 

To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews.

These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.

This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment.

#LI-AR3