Senior Endpoint Engineer

We are seeking a Senior Endpoint Engineer to support a large-scale Application Management initiative and ongoing vulnerability and patch management efforts.

This is a hands-on engineering role focused on Microsoft Intune, PowerShell automation, application management, and endpoint security across a primarily Windows environment with some macOS support.

The ideal candidate has engineered and built solutions within Intune, not simply administered the platform, and can write advanced PowerShell scripts from scratch.

Key Responsibilities * Design and engineer endpoint solutions using Microsoft Intune. * Develop PowerShell scripts from scratch for application discovery, remediation, software removal, and endpoint management. * Support application lifecycle management across approximately 300-400 applications. * Identify application ownership and work with business units to determine which applications should be retained or removed. * Package, test, deploy, and remove enterprise applications. * Support vulnerability and patch management across Windows and macOS endpoints. * Identify and remediate vulnerabilities using Tanium, Rapid7, Microsoft Defender, or similar technologies. * Support Microsoft Azure and Entra ID environments related to application management and distribution. * Partner with an MSP as application packaging and management responsibilities transition to managed services. * Communicate technical issues and recommendations to engineering teams, business stakeholders, MSP partners, and leadership. * Participate in a rotating 24/7 on-call schedule, including weekends during assigned rotations.

• Senior-level enterprise endpoint engineering experience.
• Advanced, hands-on Microsoft Intune engineering experience.
• Strong PowerShell scripting skills with the ability to write scripts from scratch.
• Vulnerability and patch management
• Application packaging, deployment, and remediation
• Windows endpoint engineering
• macOS endpoint management
• Microsoft Azure and Entra ID Experience with Tanium, Rapid7, Microsoft Defender, or comparable vulnerability management tools. Strong troubleshooting and communication skills.
• Patch My PC experience.
• Experience with large-scale application management or application rationalization initiatives.
• Experience transitioning application management responsibilities to an MSP.
• Experience using Microsoft Copilot, Claude, or similar AI tools for scripting, research, or application analysis.