Sr. Endpoint Engineer

Senior Endpoint Engineer

Location: Remote, U.S. based, with travel a few times per year
Employment Type: 3-Month Contract-to-Hire
Conversion Compensation: Approximately $180,000 -$220,000 base salary + 20% annual bonus - DOE

Position Overview

We are seeking a Senior Endpoint Engineer to help design, manage, automate, and secure a modern enterprise endpoint environment across both Windows and macOS.

This is a senior, hands-on engineering role for someone who can operate beyond day-to-day endpoint administration. You will help define endpoint standards and architecture, improve automation, strengthen security and compliance, and create a consistent end-user experience across a mixed Windows and Mac environment.

The ideal candidate brings deep experience with Microsoft Intune and the Microsoft 365 ecosystem, along with meaningful hands-on experience engineering and supporting macOS endpoints in an enterprise environment.

Key Responsibilities

• Engineer and manage enterprise endpoint solutions across both Windows and macOS environments.

• Design and maintain endpoint configuration, compliance policies, security controls, application deployment, patching, and device lifecycle standards.

• Develop and improve endpoint management capabilities using Microsoft Intune and related Microsoft technologies.

• Support macOS device management, configuration, security, application deployment, and lifecycle management through enterprise MDM solutions.

• Define technical standards for physical and virtual endpoints across the organization.

• Partner with security teams to ensure endpoints meet enterprise security and compliance requirements, including Zero Trust principles.

• Improve endpoint security across areas such as encryption, antivirus/EDR, identity, access, vulnerability remediation, and patch management.

• Lead automation efforts using PowerShell, Bash, Python, Terraform, or similar technologies.

• Identify opportunities to simplify endpoint management, reduce manual processes, improve reliability, and lower operational costs.

• Engineer solutions that improve the end-user experience during application deployments, OS upgrades, patching, and device provisioning.

• Perform advanced troubleshooting and root cause analysis for complex endpoint issues and escalations.

• Support cloud and virtual endpoint technologies such as Azure Virtual Desktop and Windows 365.

• Evaluate emerging endpoint technologies and make recommendations for future improvements.

• Create and maintain technical documentation, standards, procedures, and configuration requirements.

• Provide technical leadership and governance across the enterprise end-user computing environment.

Required Qualifications

• 10+ years of hands-on technical IT experience, with significant experience in endpoint engineering or end-user computing.

• Strong enterprise endpoint engineering experience across both Windows and macOS.

• 3+ years of hands-on engineering experience with Microsoft Intune, Windows 10/11, Microsoft 365, Entra ID/Azure AD, and related Microsoft endpoint technologies.

• Hands-on experience managing macOS devices in an enterprise environment using MDM and modern device management practices.

• Strong understanding of Windows and macOS provisioning, configuration, application deployment, patching, compliance, and security.

• Strong automation and scripting experience using PowerShell, Bash, Python, Terraform, or similar technologies.

• Experience designing and implementing endpoint configuration profiles, compliance policies, security controls, and device management standards.

• Strong understanding of endpoint security, including encryption, EDR/antivirus, patch management, identity, and device compliance.

• Experience with hybrid Azure AD/Entra ID environments and co-managed endpoints.

• Experience troubleshooting complex endpoint issues and performing root cause analysis.

• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders.

• Experience working collaboratively across infrastructure, security, support, and architecture teams.

Preferred Qualifications

• Experience working within highly regulated enterprise environments.

• Familiarity with security and compliance frameworks such as CIS Benchmarks, NIST, and ISO 27001.

• Experience with Azure Virtual Desktop and/or Windows 365.

• Experience implementing Zero Trust endpoint security principles.

• Familiarity with SASE and modern secure access technologies.

• Experience working within ITIL or similar IT service management frameworks.

• Relevant Microsoft, Apple, endpoint management, or security certifications.

What We're Looking For

This role is best suited for an engineer who has moved beyond simply administering endpoint tools. We are looking for someone who understands how to architect, automate, secure, and continuously improve a large-scale endpoint environment.

You should be equally comfortable digging into a difficult Windows or Mac endpoint issue, writing automation to eliminate repetitive work, and collaborating with security and architecture teams on the future direction of the endpoint environment.