> Markdown version of [/jobs/ext/4582585-systems-engineer-endpoint-cloud-integration](https://www.wearedevelopers.com/jobs/ext/4582585-systems-engineer-endpoint-cloud-integration). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer - Endpoint & Cloud Integration - **Company:** The Apex - **Location:** Austin, TX, United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Apple Mac Systems, Systems Engineering, Authentication Protocols, Microsoft Azure, Bash Shell, Microsoft Online Services, Command-Line Interface, Cloud Computing, Cloud Engineering, Continuous Integration, Linux, Github, Python (Programming Language), Kerberos (Protocol), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Ansible, Security Assertion Markup Language (SAML), Shell Script, Systems Integration, Scripting, Okta, AWS Lambda, Git, Cloudformation, Microsoft InTune, Information Technology, Deployment Automation, Apple Business Manager, Casper Suite, Cloud Integration, Terraform, Software Version Control, ServiceNow Customer Service Management, Servicenow - **Published:** November 5, 2026 - **Apply:** https://www.careerbuilder.com/job-details/systems-engineer-endpoint-cloud-integration-austin-tx--a8f2d9e9-ad8d-404f-b7f0-ac7ea03f506a ## About the Role Systems Engineering, Cloud Computing, Wealth Management, Stock Market, Customer Service Software, Securities, Process Improvement, Team Player, Apple, Cloud Computing, * Bachelor's degree in Computer Science or related technical discipline (or equivalent work experience) required * 2+ years in systems/endpoint engineering, including hands-on administration of both a modern MDM (Intune, plus Kandji or Jamf Pro) and AWS infrastructure. * Deep, hands-on Microsoft Intune expertise: compliance policies, configuration profiles, app protection/app config policies, Autopilot, Scope Tags, RBAC (built-in and custom roles). * Kandji or Jamf Pro administration (Blueprints/policies, Library Items/config profiles, Liftoff or equivalent zero-touch enrollment). * Apple Business Manager (ABM): DEP, VPP, device assignment, MDM server integration. * Hands-on Group Policy (GPO) experience and proven experience migrating GPO logic to cloud-native MDM/compliance policy equivalents. * Entra ID (Azure AD) administration: users/groups, dynamic groups, app registrations, enterprise apps, hybrid identity. * Conditional Access policy design and troubleshooting (sign-in logs, what-if tool, break-glass account practices). * RBAC design across Microsoft and AWS environments - custom roles, least privilege, scoped administration. * AWS WorkSpaces provisioning, directory integration (AWS Directory Service / AD Connector), and related networking. * Infrastructure as Code: Terraform, Ansible, and/or AWS CloudFormation, used for all provisioned infrastructure. * Git-based version control and CI/CD pipeline familiarity (GitHub Actions, Azure DevOps, or similar). * Scripting proficiency: PowerShell, Python, Shell, Microsoft Graph API. * Solid understanding of Windows and macOS device architecture, authentication protocols (Kerberos, SAML, OAuth/OIDC), and certificate-based auth (SCEP/PKCS). * Strong documentation habits and ability to communicate technical tradeoffs to both engineering and non-technical stakeholders. * Linux and macOS administration expertise - command-line fluency, shell scripting, and system-level troubleshooting beyond GUI-based management. Nice to Have * Microsoft certifications (MS-102 Endpoint Administrator, SC-300 Identity and Access Administrator, AZ-500). * Apple certifications (Apple Certified Support Professional / Apple Deployment and Management). * AWS certifications (Solutions Architect, SysOps Administrator). * Experience with Okta or other third-party IdPs alongside Entra ID. * Experience with security frameworks/benchmarks (CIS, NIST) as applied to endpoint compliance baselines. * ServiceNow or similar ITSM tooling for change management and automation triggers. ## Description We're hiring a Systems/Integration Engineer to own the plumbing that connects our endpoints, identity platform, and cloud infrastructure. This person will design and build integrations across AWS WorkSpaces, Microsoft Intune, Kandji, Apple Business Manager, Entra ID, and Conditional Access - replacing legacy Group Policy dependencies with modern, cloud-native, policy-as-code management. Everything shipped must be automated and reproducible. What You'll Do * Own and maintain integrations between AWS WorkSpaces and on-prem/cloud identity (Entra ID, AD Connect/Cloud Sync). * Own end-to-end Intune administration: compliance policies, configuration profiles, app deployment, Autopilot/Windows enrollment, Scope Tags, and RBAC design across business units. * Manage Apple device lifecycle via Kandji + Apple Business Manager (ABM): DEP enrollment, supervised device policies, app deployment, and zero-touch provisioning. * Design and enforce Conditional Access policies in Entra ID (device compliance, location, risk-based sign-in, session controls) in coordination with security/identity teams. * Work with Team on migration of legacy Group Policy Objects (GPOs) to Intune/Entra-based configuration and compliance policies, including translating GPO logic 1:1 where needed and documenting gaps. * Build and maintain RBAC models across Intune, Entra ID, and AWS (least-privilege scoped admin roles, custom roles, Scope Tag-based delegation). * Write and maintain AWS Lambda functions to automate device lifecycle events, cross-platform sync (e.g., Kandji Intune Entra WorkSpaces), reporting, and remediation workflows. * Build all infrastructure using Infrastructure as Code (Terraform, Ansible, and/or CloudFormation) no manual console changes for anything reproducible, managed through version control with peer review. * Develop automation/scripting for endpoint and identity workflows (PowerShell, Python, Microsoft Graph API). * Implement and maintain MDM solutions for BYOD devices for Windows/Mac/Linux/Android devices., * Legacy GPOs fully migrated to Intune/Entra with documented parity or intentional deviation. * All new infrastructure provisioned via IaC with zero manual "ClickOps" for repeatable resources. * Clear RBAC/Scope Tag model reducing over-privileged admin access. * Reliable, automated sync between device management platforms and identity/cloud resources (fewer manual reconciliation tickets). Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.