> Markdown version of [/jobs/ext/2707558-systems-engineer-iii-endpoint-management-organization](https://www.wearedevelopers.com/jobs/ext/2707558-systems-engineer-iii-endpoint-management-organization). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer III - Endpoint Management Organization - **Company:** Sprouts Farmers Market - **Location:** Phoenix, AZ, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Application Programming Interfaces (APIs), Apple Mac Systems, Application Lifecycle Management, Systems Engineering, Bash Shell, Chrome OS, Configuration Management, Cyber Security, Information Systems, Databases, System Configuration, Data Security, Design of User Interfaces, Human-Computer Interaction, Python (Programming Language), Microsoft Software, System Center Configuration Manager, Windows Servers, Windows PowerShell, Systems Development Life Cycle, Azure Active Directory, Server Administration, Server Supported Gaming, Service Pack, Software Deployment, Software Engineering, Technical Data Management Systems, User Environment Management, VMware VSphere, Scripting, Software Distribution, Microsoft InTune, Tanium Platform Expertise, Information Technology, Deployment Automation, Patch Management, Casper Suite, 3-tier Architectures, CIS Benchmarks - **Published:** September 4, 2026 - **Apply:** https://www.careerbuilder.com/job-details/systems-engineer-iii-endpoint-management-phoenix-az--388c6045-621a-4119-8912-8b82e3bcea74 ## About the Role Required * Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience. * 3+ years in endpoint engineering, systems engineering, or device management roles within an enterprise environment. * Hands-on proficiency with Microsoft Intune, including configuration profiles, compliance policies, application deployment, and update rings. * Working experience with Microsoft Configuration Manager (SCCM/MECM) for software distribution, operating system deployment, or patch management. * Hands-on experience with Windows Autopilot enrollment, including hardware hash collection, deployment profiles, and Enrollment Status Page configuration. * Proficiency in PowerShell for endpoint automation, scripting, and reporting; ability to write and troubleshoot scripts independently. * Working knowledge of Microsoft Entra ID, Conditional Access, and device compliance concepts. * Experience planning and executing patching or operating system upgrade campaigns across a distributed device fleet. * Familiarity with endpoint security frameworks such as CIS Benchmarks and standard patch management practices. * Strong problem-solving and analytical skills, with the ability to clearly explain technical concepts to both technical and non-technical audiences. Preferred * Experience with Tanium for patching, software deployment, or compliance enforcement. * Experience managing macOS endpoints through Kandji, Jamf, or a comparable Apple MDM platform, including Apple Business Manager. * Experience supporting endpoints in a retail, distributed-site, or multi-time-zone environment. * Experience with third-party patching platforms such as Patch My PC. * Familiarity with ChromeOS device management and kiosk configuration. * Additional scripting experience with Bash, Python, or Microsoft Graph API. * Exposure to Microsoft 365, Windows Server, or VMware vSphere administration. * Relevant certifications such as Microsoft MD-102 (Endpoint Administrator Associate), AZ-104, or Apple/Kandji certifications., 1st Level Support, Administrative Management, Administrative Skills, Analysis Skills, Apple, Application Programming Interface (API), Automation, Bash Scripting, Benchmarking, Campaigns, Coaching, Communication Skills, Computer Science, Configuration Management, Continuous Improvement, Cryptography, Customer Relations, Customer Support/Service, Distribution Services, Documentation, Endpoint Security, Engineering Management, Establish Priorities, Follow Through, Grocery Stores, Identify Issues, Information Technology & Information Systems, Information/Data Security (InfoSec), Installation Guide, Knowledge Base, Knowledge Transfer, Mac Operating System, Machine Tool, Maintain Compliance, Manufacturing Data Management, Microsoft Access Database, Microsoft Certifications, Microsoft Product Family, Microsoft Windows Operating System, Microsoft Windows Server, On Call, Operating Systems, Policy Development, Problem Solving Skills, Process Improvement, Proof of Concept, Python Programming/Scripting Language, Regulatory Compliance, Retail, Root Cause Analysis, Scripting (Scripting Languages), Security Compliance, Server Support, Set Goals, Software Administration, Software Development Lifecycle (SDLC), Software Distribution, Software Patches, Strategic Planning, System Center Configuration Manager (SCCM), Systems Administration/Management, Systems Engineering, User Interface/Experience (UI/UX), VMWare vSphere, Vehicle Fleets, Willing to Travel, Windows PowerShell, Writing Skills ## Description The Systems Engineer III - Endpoint Management is a hands-on engineering role responsible for the day-to-day management, configuration, and continuous improvement of Sprouts' corporate and retail endpoint fleet across Windows and macOS. Working within a small, high-impact endpoint team, this engineer builds and maintains device configuration, application deployment, patching, and compliance across Microsoft Intune, Microsoft Configuration Manager (SCCM), Tanium, and Kandji. This is an execution-focused engineering role. Endpoint strategy and platform direction are set in partnership with the Systems Engineering Supervisor and senior engineers; this position contributes technical recommendations, owns the build and rollout, and serves as an escalation point for the service desk. The role reports to our Store Support Office in Phoenix, AZ, with a hybrid work arrangement requiring in-office presence Tuesday through Thursday. Overview of Responsibilities * Build, deploy, and maintain device configuration profiles, compliance policies, and security baselines across Windows and macOS using Microsoft Intune and Kandji. * Administer Microsoft Configuration Manager (SCCM) for the existing store and corporate Windows support the ongoing migration of those devices to Intune and Windows Autopilot. * Manage zero-touch enrollment programs including Windows Autopilot and Apple Business Manager (ABM/DEP), including hardware hash management, enrollment status pages, and vendor drop-ship coordination. * Own operating system patching and feature update campaigns using Tanium and Intune update rings, including ring design, pilot validation, phased rollout across time zones, communication, and rollback planning. * Package, test, and deploy applications and application updates across Windows and macOS using Tanium, Intune, Patch My PC, and Kandji, favoring automated role-based assignment over manual installation. * Develop and maintain PowerShell automation for endpoint lifecycle tasks including remediation scripts, reporting, bulk operations, and Microsoft Graph API interactions. * Configure and maintain endpoint security controls including disk encryption, local administrator management, certificate deployment, and CIS benchmark enforcement in partnership with the Information Security team. * Support Conditional Access and device compliance policy configuration within Microsoft Entra ID, ensuring devices meet posture requirements before accessing corporate resources. * Diagnose and resolve escalated tier 3 endpoint incidents spanning hardware, operating system, application, and management-policy layers; perform root cause analysis and implement preventive fixes. * Create and maintain operational documentation including enrollment procedures, policy configurations, deployment runbooks, and knowledge base articles for the service desk. * Serve as a technical escalation point for the service desk and provide coaching and knowledge transfer to support staff and junior engineers. * Participate in a rotating on-call schedule providing first-line tier 3 support for server and infrastructure issues. * Support off-hours deployment windows as required for retail store maintenance across multiple time zones. * Evaluate new endpoint tooling and capabilities through proof-of-concept work and provide recommendations to the Systems Engineering Supervisor and senior engineers., * Execution and Follow-Through: Delivers work that is tested, documented, and complete; sets measurable goals and pursues them with a sense of urgency. * Automation Mindset: Looks for repetitive manual work and eliminates it through scripting, policy, and process improvement. * Security Orientation: Integrates security thinking into every aspect of device and application lifecycle management. * Customer Focus: Prioritizes end-user experience and business needs while maintaining security and compliance standards. * Communication: Clearly conveys technical concepts to both technical and non-technical stakeholders; actively listens and collaborates across teams. * Positive Approach: Demonstrates a constructive attitude in challenging situations and inspires others with a forward-looking outlook. Work Environment * Hybrid schedule based out of the Sprouts Store Support Office in Phoenix, Arizona, with in-office presence Tuesday through Thursday. * Participation in a rotating on-call schedule of approximately one week in eight. * Availability for off-hours and weekend maintenance windows supporting retail store deployments across multiple time zones. * Occasional travel to retail locations or distribution centers may be required., The above statements are intended to describe the general nature and level of the work being performed by people assigned to this work. This is not an exhaustive list of all duties, responsibilities, and requirements. Sprouts' management reserves the right to amend and change duties, responsibilities, and requirements to meet business and organizational needs as necessary. Sprouts will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Chance in Hiring Ordinance. California Residents: We collect information in accordance with California law, please see here for more information. ## Related Videos - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [The Memory Leak That Ate Our Cluster: A Postmortem](https://www.wearedevelopers.com/videos/2057-the-memory-leak-that-ate-our-cluster-a-postmortem) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Automated MS SQL Server database deployments with dacpacs and Azure DevOps](https://www.wearedevelopers.com/videos/334-automated-ms-sql-server-database-deployments-with-dacpacs-and-azure-devops) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)