> Markdown version of [/jobs/ext/1408112-it-senior-endpoint-engineer-microsoft-endpoint-configuration-manager-mecm-intune](https://www.wearedevelopers.com/jobs/ext/1408112-it-senior-endpoint-engineer-microsoft-endpoint-configuration-manager-mecm-intune). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Senior Endpoint Engineer - Microsoft Endpoint Configuration Manager (MECM) & Intune - **Company:** Pantex, Inc. - **Location:** Amarillo, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Application Packaging, Microsoft Azure, BitLocker Drive Encryption, Cyber Security, Disaster Recovery, Identity and Access Management, Interoperability, Log Analysis, Windows Installer, System Center Configuration Manager, Windows API, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Power BI, Azure Active Directory, Kusto Query Language, SQL Databases, SQL Server Reporting Services, Windows Management Instrumentation, Software Distribution, Microsoft InTune, Information Technology, Deployment Automation, Windows Security, CIS Benchmarks, Sql Tuning, Wsus - **Published:** July 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=90e71bba3eb9c0da ## About the Role * Bachelor's degree in engineering/science/information technology discipline: Minimum 2 years of relevant experience. * OR Master's degree in engineering/science/information technology discipline. * OR applicants without a bachelor's degree may be considered based on a combination of at least 10 years of completed education and/or relevant experience., * Expert-level experience with MCM administration, OSD engineering, software distribution, client health, and update compliance. * Strong experience with Intune, Autopilot, configuration profiles, compliance/policy management, and Windows security baselines. * Deep PowerShell scripting capability, operational analytics knowledge (Log Analytics/KQL, SSRS, Power BI). * Proven ability to diagnose and resolve complex Windows/MECM/Intune issues at scale. * Experience with CMG, Tenant Attach, and defining MECM/Intune co-management workloads. * Experience optimizing MECM SQL performance and WSUS/SUP maintenance. * Work with Secure Communications Interoperability (SCUP) or third-party patching solutions. * Relevant Microsoft certifications (MD-102, SC-300, AZ-104, AZ-500) or equivalent hands-on proficiency. ## Description As a hands-on technical specialist, you will serve as the enterprise owner for endpoint management across Windows devices. Your primary responsibility will be the design, configuration, operation, and troubleshooting of Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune, along with the Azure/Entra ID services that keep Intune resilient and secure. You will drive patch/update compliance, application and Operating System (OS) deployments, client health, and co-management strategy Microsoft Endpoint Configuration Manager (MECM + Intune), while closely collaborating with Cybersecurity, Network, and Support teams to ensure reliability, security, and compliance of our endpoint fleet. You are responsible for maintaining a thorough knowledge of applicable Federal, State, Department of Energy (DOE), Corporate and Plant rules, regulations, and Plant-wide operating policies and procedures., * Own, administer, and continually optimize MCM core infrastructure (site server, Management Point (MP)/Distribution Point (DP) roles, Structured Query Language (SQL), Windows Server Update Services (WSUS)/Software Update Point (SUP), boundary groups, content distribution, and backup/disaster recovery (DR) `readiness). * Drive client-health improvement using telemetry, automation, and consistent collection hygiene. * Enhance platform performance and scalability across multiple locations and networks. OS Deployment (OSD) Engineering * Lead design, maintenance, and modernization of OSD task sequences for Windows 11. * Engineer efficient driver-lifecycle management, secure imaging standards, pre-provisioning (BitLocker), post-install hardening, and automation to reduce build time and increase reliability. * Evaluate migration from traditional OSD to Autopilot-first strategies where appropriate. Software Packaging & Deployment * Establish packaging standards and best practices for Microsoft Installer (MSI)/Executable File (EXE)/Win32 deployments across MECM and Intune. * Build, test, and deploy applications at scale; optimize distribution-point content placement and success-rate visibility. * Expand capabilities using third-party patch/catalog solutions to increase coverage. Patch & Update Compliance * Lead monthly update cycles for Windows OS, Microsoft 365 Apps, and third-party applications. * Rapidly remediate non-compliant devices through automation and targeted deployments. * Ensure WSUS/SUP synchronization health and maintain a reliable update pipeline. Intune & Modern Device Management * Own Intune configuration strategy, including Autopilot, configuration profiles, compliance policies, and Windows Update for Business rings. * Implement and maintain Endpoint Security Baselines (BitLocker, Defender, firewall, attack surface reduction, Credential Guard). * Drive clarity and evolution of MECM/Intune workload split using co-management and Tenant Attach. Identity & Security Integration * Manage Entra ID (Azure AD) device identity, Conditional Access policies, role-based access control, and SCEP/NDES/PKI integrations. * Ensure secure enrollment, compliance signaling, and alignment with cybersecurity requirements. Automation, Monitoring & Troubleshooting * Use PowerShell, Microsoft Graph Application Programming Interface (API), Kusto Query Language (KQL) (Log Analytics/Azure Monitor), and SQL Server Reporting Services (SSRS)/Power Business Intelligence (BI) reporting to automate operations and improve visibility. * Troubleshoot complex endpoint failures (Windows Management Instrumentation (WMI), Background Intelligent Transfer Service (BITS), policy conflict, client registration, SUP sync, Cloud Management Gateway (CMG) connectivity) and deliver long-term fixes. Documentation & Leadership * Create and maintain enterprise runbooks, engineering standards, and troubleshooting guides. * Lead technical workshops, mentor peers, and contribute to continuous improvement of endpoint management processes. ## Related Videos - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Making Data Warehouses fast. A developer's story.](https://www.wearedevelopers.com/videos/302-making-data-warehouses-fast-a-developer-s-story) - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [Why make use of an integration platform in today's software developments and infrastructure?](https://www.wearedevelopers.com/videos/758-why-make-use-of-an-integration-platform-in-today-s-software-developments-and-infrastructure) - [Fine-Tuning Small Language Models for Agentic AI](https://www.wearedevelopers.com/videos/100352-fine-tuning-small-language-models-for-agentic-ai) - [REST, GraphQL, gRPC, and more: A comparison of modern API styles](https://www.wearedevelopers.com/videos/100247-rest-graphql-grpc-and-more-a-comparison-of-modern-api-styles) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 212: WebMCP or MCP, What is DevRel, AI's 10% Productivity Boost, and a 49MB Web Page…](https://www.wearedevelopers.com/magazine/717-dev-digest-212-webmcp-or-mcp-what-is-devrel-ai-s-10-productivity-boost-and-a-49mb-web-page) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)