Endpoint Engineer
On-siteBeaverton, Oregon, United States
Job Summary
Implement and manage endpoint security measures, ensuring compliance with industry standards and company policies. Develop, optimize, and troubleshoot Windows Autopilot deployment solutions, including pre-provisioning, self-deploying, and user-driven scenarios. Assist and back up the Microsoft 365 Global Administrator for tenant administration, managing identities, licensing, and security controls through Entra ID. Integrate endpoint solutions within cloud infrastructure using Microsoft Intune, Idira, and Adaptiva, while identifying opportunities to automate management processes through scripting. Advancing Workforce AI Strategy by developing solutions using MS Copilot Studio and Claude, establishing governance, and implementing monitoring dashboards. Deploy software for service packs and emergency security patches within the change management process. Maintain documentation and runbooks for tenant configuration to ensure continuity of coverage.
Required Qualifications
- Proficient knowledge of Active Directory and Group Policy
- Experience with Virtual Desktop Infrastructure
- Strong experience with systems analysis and functional design
- Familiarity with endpoint encryption solutions
- Proven experience in cloud platforms, such as Microsoft Azure or AWS
- Proficient experience of endpoint management tools like Microsoft Intune, Defender, or similar
- Proven experience implementing monitoring, reporting, and dashboards
- Familiarity with scripting languages (PowerShell, Python, etc.) for automation
- Experience working with formal, enterprise-grade Patch Management and Change Control Systems in a cloud environment
- Proven experience developing AI solutions using MS Copilot Studio and Claude to improve process efficiency and innovate
- Ability to support iOS mobile devices (iPhone/iPad) in a cloud environment
- MD-102 Endpoint Administrator Committed to completing in first 6 months in role if not already obtained
- CompTIA SecAI+ (exam CY0-001)
- Microsoft Azure Certification(s)
- MCSE Certification (Mobility, Productivity Solutions Expert, Cloud Platform and Infrastructure)
- Microsoft Certified Professional (MCP)
- COMPTIA A+
Desired Qualifications
- Microsoft Intune
- Microsoft Active Directory and Entra ID GPO management
- SharePoint Administration
- PowerShell scripting
- MDM (Mobile Device Manager)
- Windows 10 & 11
- Endpoint VPN methodologies and best practices
- PCI compliance standards & endpoint management best practices
- Develop/Maintain comprehensive documentation and architectural design/diagrams
- Provide training and support on new technologies and best practices
- Collaborate & communicate effectively with stakeholders, IT, end-users, peers & 3rd parties
- Proficient in MacOS administration, including system configuration, user account management, and security settings
- Experience in deploying and managing Apple devices, ensuring proper setup, configurations, and centralized management through solutions like Apple Business Manager
- Expertise in implementing and managing security measures specific to macOS, and troubleshooting hardware and software issues efficiently
- Ability to seamlessly integrate Apple devices with other platforms, ensuring smooth collaboration in a heterogeneous corporate environment
- Knowledge of MDM solutions for Apple devices (i.e., MS Intune, Mosyle, etc.), enabling centralized management, configuration, and security policy enforcement
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.