Unified Endpoint Management Engineer

Key Responsibilities: 

Administer Microsoft endpoint management solutions, including Intune, Autopilot, Group Policy, Entra ID-integrated device controls, and related client platform services. 

Manage software packaging, deployment, update rings, and patch compliance across enterprise endpoints. 

Maintain and enforce software, hardware, and configuration standards for enterprise devices. 

Troubleshoot and resolve complex Level 4 incidents related to device management, software deployment, endpoint configuration, and print services. 

Develop and maintain configuration baselines, policy settings, compliance controls, and device restrictions. 

Support remote management, self-service capabilities, and automation opportunities using Microsoft-native tooling and PowerShell. 

Partner with security, service desk, and infrastructure teams on endpoint hardening, vulnerability remediation, and operational improvements. 

Create and maintain technical documentation, support procedures, and knowledge articles. 

Key Performance Measures: 

Endpoint patch and policy compliance across managed devices. 

Success rate for software deployment, packaging, and device provisioning activities. 

Incident resolution performance for assigned Level 4 support tickets. 

Reduction in repeat incidents caused by endpoint configuration issues. 

Quality and timeliness of engineering documentation and operational changes. 

Competencies and Behaviors: 

Tech Savvy – Advanced: Applies solid technical knowledge across Microsoft endpoint platforms and tools. 

Ensures Accountability – Advanced: Independently owns deliverables and follows through on commitments. 

Collaborates – Advanced: Builds effective working relationships across support and engineering teams. 

Communicates Effectively – Advanced: Explains technical issues and recommendations clearly to technical and non-technical audiences. 

Customer Focus – Advanced: Balances user experience, supportability, and standardization. 

Optimizes Work Processes – Working: Identifies and implements practical improvements in day-to-day operations. 

Qualifications: 

Bachelor’s degree in Information Technology, Computer Science, or related field preferred. 

Microsoft endpoint or Microsoft 365 certification preferred. 

Working knowledge of Intune, Autopilot, Entra ID, Group Policy, and Windows device management. 

PowerShell scripting capability required. 

Experience: 

2–5 years of experience in endpoint engineering, client platform administration, or modern device management. 

Experience managing Windows device policies, software deployment, patching, and endpoint standards. 

Hands-on experience with Intune and other Microsoft device management technologies. 

Experience supporting remote management, endpoint compliance, and print/peripheral services. 

Experience with PowerShell automation and configuration scripting. 

Familiarity with change control, incident management, and problem resolution processes. 

Scope Factors: 

Operates independently across one or more client platform service areas and may lead small to mid-sized initiatives. No direct people management, but may guide less experienced engineers. Supports global or multi-site endpoint environments. Limited direct budget ownership; influences operational spend, licensing decisions, and tool usage through engineering recommendations. Regular matrix engagement with security, support, infrastructure, and application teams.