Senior Endpoint Management Engineer (Temporary)

THE OPPORTUNITY

We need a senior, hands-on endpoint management expert who can take ownership of our modern endpoint environment immediately. This role will lead the day-to-day administration and ongoing improvement of Microsoft Intune, Windows Autopilot, Automox, Microsoft 365, Entra ID, patch compliance, endpoint security, automation, and device lifecycle management.

This is not a basic desktop support role. We are looking for someone who can troubleshoot complex endpoint issues, clean up inconsistent configurations, improve patch and compliance reporting, automate repetitive work, and build durable processes that reduce support burden and improve the user experience.

WHAT YOU'LL DO

• Microsoft Intune administration, including configuration profiles, compliance policies, app deployments, enrollment, reporting, and troubleshooting.
• Windows Autopilot provisioning, device enrollment, endpoint standards, rebuilds, refreshes, and lifecycle processes.
• Automox patch management, including patch policy design, compliance tracking, failed patch remediation, Worklets, reporting, and exception handling.
• Endpoint security controls, including security baselines, Vir security tools, Conditional Access dependencies, local admin controls, and secure configuration standards.
• Microsoft 365 and Entra ID tasks tied to endpoint operations, including device identity, groups, licensing, access, and user/device lifecycle administration.
• PowerShell and Microsoft Graph automation to reduce manual effort, improve visibility, and fix recurring endpoint issues at scale.
• Operational documentation, runbooks, support guides, reporting, and repeatable processes for IT Operations and Service Desk teams.
• Own Microsoft Intune as the primary endpoint management platform for Windows and macOS endpoints.
• Design, implement, troubleshoot, and continuously improve device enrollment, Windows Autopilot, configuration profiles, compliance policies, security baselines, application deployments, update rings, device restrictions, and endpoint lifecycle workflows.
• Serve as the escalation point for complex Intune, Autopilot, enrollment, policy, application deployment, compliance, and device configuration issues.
• Develop a clean, scalable endpoint architecture that minimizes drift, reduces one-off exceptions, and supports consistent configuration across the fleet.
• Create and maintain device standards for provisioning, rebuilds, refreshes, remote support, decommissioning, and secure disposal.
• Use reporting, dashboards, and operational review cycles to identify compliance gaps, failed deployments, device health issues, and recurring endpoint problems.
• Translate business needs into endpoint management policies that are secure, supportable, and user-conscious.

WHO YOU ARE AND WHAT YOU BRING

• 5+ years of experience in endpoint management, modern workplace engineering, systems administration, infrastructure operations, or a related role.
• Strong hands-on experience with Microsoft Intune and Windows endpoint management.
• Experience with Windows Autopilot, device enrollment, application deployment, compliance policies, and endpoint troubleshooting.
• Experience with Automox or another enterprise patch management platform.
• Working knowledge of Microsoft 365, Entra ID, endpoint security, device identity, access controls, and user/device lifecycle processes.
• Ability to script and automate with PowerShell; Microsoft Graph experience is a strong plus.
• Strong troubleshooting, documentation, communication, and ownership skills.