> Markdown version of [/jobs/ext/1457532-mdm-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/1457532-mdm-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # MDM/Endpoint Engineer - **Company:** KDINFOTECH INC - **Location:** Redwood City, CA, United States - **Experience:** Experienced - **Salary:** $100,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Android Software Development, Apple IOS, Apple Mac Systems, User Authentication, Bash Shell, Data Integrity, Mobile Application Software, Python (Programming Language), Public Key Infrastructure, Windows PowerShell, Software Deployment, Scripting, Workspace ONE, Microsoft InTune, Deployment Automation, Casper Suite, GXP - **Published:** July 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=b1ca88f98ffc9175 ## About the Role An ideal candidate is self-motivated and passionate about technology, and naturally curious. We are looking for someone who enjoys taking an outside-the-box approach to unique problems and who understands the added rigor that comes with managing endpoints in an environment where data integrity, privacy, and compliance are non-negotiable., * 3+ yrs. administering an MDM platform (Jamf Pro, Intune, Workspace ONE, or similar) * Experience managing both macOS and Windows endpoint fleets within a single environment * Windows administration/GPO management experience * Experience with Apple Business Manager / Windows Autopilot zero-touch provisioning * Working knowledge of Active Directory / Entra ID and endpoint identity and authentication * Scripting experience (Bash, Zsh, PowerShell, or Python) for automation and remediation * Familiarity with compliance frameworks relevant to biohealth/life sciences (HIPAA, GxP, etc…) * Excellent written and verbal communication skills * Ability to write and maintain technical documentation Desired Skills * Experience supporting endpoints in a validated/regulated systems environment * Familiarity with mobile application management (MAM) and conditional access policies * Experience with endpoint security/EDR tooling and its integration with MDM platforms * Working knowledge of certificate-based authentication and PKI for device trust * Working knowledge of infrastructure-as-code or automation frameworks for endpoint provisioning ## Description As an MDM/Endpoint Engineer at KDI, you will be responsible for supporting and securing the full device lifecycle across our client's organization. This includes but is not limited to mobile device management, endpoint provisioning, patch and update management, endpoint security hardening, and support for devices operating in a regulated, validated-systems environment., * Administer and maintain MDM platforms (Jamf Pro, Microsoft Intune, Workspace ONE, or similar) across macOS, Windows, iOS, and Android fleets * Design and maintain zero-touch provisioning workflows (Apple Business Manager, Windows Autopilot) for new hire, lab, and shared-device enrollment * Build and enforce configuration profiles, compliance policies, and security baselines aligned with HIPAA, GxP, and other biohealth regulatory requirements * Manage patch, OS update, and application deployment cycles across the endpoint fleet * Monitor client and internal endpoint compliance and proactively resolve non-compliant or at-risk devices * Leverage automation and scripting to optimize enrollment, patching, reporting, and remediation workflows * Partner with Security and Compliance teams to support audits, risk assessments, and validation documentation for regulated devices and systems * Troubleshoot common endpoint hardware, OS, and MDM policy issues * Work with business process owners to write and implement device management policy, including access controls, data protection, and retention standards ## Related Videos - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 189: Open Phones, Be the Messenger and the USB-C of AI](https://www.wearedevelopers.com/magazine/639-dev-digest-189-open-phones-be-the-messenger-and-the-usb-c-of-ai) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)