Senior Windows Endpoint Engineer

• Design, implement, and maintain enterprise endpoint management solutions using Microsoft Intune.
• Manage endpoint lifecycle processes including provisioning, deployment, configuration, maintenance, and retirement.
• Develop and maintain device configuration profiles, compliance policies, update rings, and security baselines.
• Support migration and coexistence strategies between Workspace ONE and Microsoft Intune.

Windows Engineering

• Administer and support Windows 11 enterprise environments.
• Create and manage standardized endpoint configurations and operating system deployment strategies.
• Evaluate new Microsoft endpoint technologies and recommend improvements to the workplace computing environment.
• Provide advanced troubleshooting for complex Windows platform issues.

Automation & Scripting

• Develop PowerShell automation solutions to improve operational efficiency.
• Create automated remediation, reporting, compliance validation, and deployment processes.
• Use Microsoft Graph APIs to automate endpoint administration, reporting, and device lifecycle activities.

Endpoint Security & Compliance

• Implement endpoint security standards and compliance controls.
• Manage device compliance policies, encryption, security baselines, and conditional access requirements.
• Partner with cybersecurity teams to remediate vulnerabilities and maintain regulatory compliance.
• Monitor endpoint health, risk, and policy adherence across enterprise device fleets.

Autopilot & Provisioning

• Design and support Windows Autopilot deployments.
• Troubleshoot enrollment, provisioning, and Enrollment Status Page issues.
• Implement zero-touch deployment and device onboarding strategies.
• Optimize user experience during provisioning and device refresh initiatives.

Advanced Troubleshooting

• Lead root cause analysis of complex endpoint management and policy deployment issues.
• Troubleshoot Microsoft Intune, MDM, compliance, device registration, and identity integration issues.
• Support Tier 3 escalation activities for endpoint-related incidents and outages.

• 2 years of Windows endpoint engineering or endpoint management experience.
• Microsoft Intune administration experience.
• Windows 11 engineering and troubleshooting expertise.
• Experience with Microsoft Graph API.
• Hands-on experience with Windows Autopatch.
• Advanced PowerShell scripting and automation skills.
• Experience managing Configuration Profiles and Compliance Policies.
• Knowledge of Microsoft Entra ID device management.
• Strong understanding of endpoint security and compliance frameworks.
• Experience supporting large enterprise endpoint environments.
• Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Desired Experiences:

• Bachelor degree or equivalent
• Workspace ONE administration experience.
• SCCM/MECM experience.
• Windows Autopilot deployment expertise.
• Experience with Conditional Access and Zero Trust initiatives.
• Endpoint analytics and reporting experience.
• Microsoft certifications in Intune, Endpoint Administrator, or related technologies.
• Experience supporting hybrid and cloud-native device management architectures., Bachelor’s Level Degree (Required)

The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.