> Markdown version of [/jobs/ext/223914-windows-endpoint-automation-engineer](https://www.wearedevelopers.com/jobs/ext/223914-windows-endpoint-automation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Windows Endpoint Automation Engineer - **Company:** Vanguard - **Location:** Wayne, PA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Code Review, Continuous Integration, System Center Configuration Manager, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Software Deployment, Policy as Code, Delivery Pipeline, Microsoft InTune, Git Flow, Deployment Automation, CIS Benchmarks, Unified Endpoint Management - **Published:** May 24, 2026 - **Apply:** https://www.juju.com/job/00000000g20mrb ## About the Role + Strong experience with Windows endpoint engineering in an enterprise environment (OS configuration, policy management, troubleshooting, and lifecycle management). + Hands-on experience with Microsoft Intune and SCCM/MECM for application delivery, device management, and endpoint configuration. + Experience with Windows Autopilot and modern provisioning patterns. + Proficiency in PowerShell for automation, packaging, and remediation workflows. + Working knowledge of CI/CD concepts and Git-based workflows (code reviews, branching strategies, reusable templates/modules). + Familiarity with Microsoft Entra ID and endpoint identity/compliance patterns. + Experience with Desired State concepts (e.g., Desired State Configuration or similar) is a plus. + Understanding of enterprise endpoint security concepts (security baselines, hardening, least privilege, patching/updates). + Familiarity with monitoring/telemetry and operational observability concepts is a plus. What it takes: + Undergraduate degree in a related field or equivalent experience. + 3-5+ years of relevant experience in Windows endpoint engineering, automation, or platform engineering roles. + Strong analytical, problem-solving, and troubleshooting skills. + Strong written and verbal communication skills, with the ability to document standards and enable others. + Ability to work across teams, influence standards, and drive automation-first engineering practices. + Strong planning, organization, and delivery discipline. Qualifications: + Minimum of eight years related work experience. + Undergraduate degree in a related field or the equivalent combination of training and experience. Special Factors ## Description + Lead endpoint automation for provisioning, compliance, remediation, and standard configuration across the Windows fleet. + Engineer and modernize deployment workflows using Microsoft Intune, SCCM/MECM, and Windows Autopilot, with a focus on repeatability, safety, and scale. + Build reusable PowerShell-based frameworks (and supporting tooling) for device configuration, drift detection, self-healing remediation, and operational consistency. + Define and evolve Windows endpoint standards including OS baseline configuration, security baselines, and lifecycle practices aligned with enterprise requirements. + Partner with QA and release governance to improve validation practices for patches, feature updates, policy changes, security configuration, and application rollouts. + Implement and expand CI/CD practices for endpoint engineering content (scripts, configuration, packaging, policy-as-code where applicable), using Git-based workflows, reviews, and promotion patterns. + Integrate with identity and security platforms (e.g., Microsoft Entra ID) to support secure provisioning, access, and device compliance patterns. + Reduce operational toil and improve reliability by automating routine work, codifying repeatable runbooks, and improving observability and troubleshooting signals. ## Related Videos - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Policy as [versioned] code - you're doing it wrong](https://www.wearedevelopers.com/videos/532-policy-as-versioned-code-you-re-doing-it-wrong) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Decoupled Authorization using Policy as Code](https://www.wearedevelopers.com/videos/35-decoupled-authorization-using-policy-as-code) - [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Now is the time for industrialized software development](https://www.wearedevelopers.com/magazine/601-now-is-the-time-for-industrialized-software-development) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)