> Markdown version of [/jobs/ext/1509161-lead-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/1509161-lead-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Endpoint Engineer - **Company:** Jfc Global - **Location:** Lancaster, PA, United States - **Experience:** Expert - **Salary:** $120,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, JIRA, BitLocker Drive Encryption, HP Thin Clients, Azure Active Directory, Software Deployment, Software Vulnerability Management, EndPointSecurity, Microsoft InTune, Deployment Automation, CIS Benchmarks, U-Boot - **Published:** July 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=edd13abe61974910 ## About the Role * Strong hands on endpoint engineering background (not just service desk escalation). * Proven experience owning Intune at scale, including: configuration profiles, compliance, app deployment, Autopilot, and rollout strategy. * Solid endpoint security experience (Defender for Endpoint and similar tooling, remediation workflows, policy enforcement). * Experience supporting hybrid enterprise identity environments (AD + Entra ID concepts, device identity, access controls). * Comfort operating in a multi-site environment where onsite coordination and operational urgency matter. * Ability to lead, prioritize, and execute with minimal day to day task assignment. Nice to have * Thin client management experience (WYSE / Dell WMS). * Manufacturing or production environment exposure (24/7 mindset, low downtime tolerance). * Experience leading large programs like OS upgrades, carrier migrations, or acquisition integrations. ## Description We are seeking a Lead Endpoint Engineer to own the design, deployment, security posture, and lifecycle management of end user devices across a multi-site manufacturing environment. This is an engineering and project execution role, not a ticket-only or break/fix role. You will lead endpoint initiatives end to end, partner closely with security and infrastructure teams, and drive standards through change management.This role is a backfill for a lead who was running major endpoint programs at scale (for example: large Windows 11 upgrades, mobile device and BYOD MDM design, Autopilot rollout, carrier migrations across 1,000+ devices, and security tooling ownership). We need someone who can step into that kind of ownership and keep the roadmap moving., * Own and improve Microsoft Intune configuration profiles, compliance policies, security baselines, and application deployment strategy. * Lead Autopilot enrollment and provisioning workflows (including shared device and specialized user group models). * Design and manage Windows update strategy (update rings, feature updates, quality updates, rollout controls, and remediation). * Drive endpoint standardization and hygiene across device populations (policy consistency, profile cleanup, scoping, documentation). Endpoint security and vulnerability remediation * Own day to day endpoint security posture and remediation work tied to security findings and defined timelines. * Administer and tune endpoint security tools and policies (including Defender for Endpoint and Carbon Black App Control style allowlisting/approval workflows). * Maintain encryption and platform trust posture (BitLocker, Secure Boot related considerations, tamper protection, and policy enforcement). Identity and access alignment (Entra ID / Conditional Access / SSO) * Support and improve endpoint-related identity integrations with Entra ID (Azure AD), Conditional Access alignment, and device-based access controls. * Assist with MFA initiatives and identity audits in partnership with security/infrastructure teams. Thin clients and specialized manufacturing site devices * Support thin client management (including Dell/WYSE management tooling) and standards across manufacturing sites. * Help troubleshoot urgent incidents impacting operations, with focus on fast recovery and prevention through better engineering. Change management and project leadership * Author and own changes through a formal change process (CAB), from design through implementation and validation. * Lead concurrent projects independently, drive timelines, and coordinate across teams. * Build and maintain runbooks, standards, and technical documentation (tools referenced include Jira Service Management). ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)