Endpoint Engineer

Apex

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TX
Posted
62 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $165k
$111k $217k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $126,800–$203,800.

Based on 240 similar postings.

Employer

About Apex

Apex Fintech Solutions provides brokerage infrastructure and clearing services to financial services companies, enabling them to deliver investing, trading, and retirement solutions to their customers. Industry: Financial Technology & Brokerage Infrastructure

Apex currently has 11 open roles on FindRole.

Most-posted roles

View all roles at Apex

At a glance

TL;DR · Endpoint Engineer

Role Posting Log in to save

The Endpoint Engineer joins the Endpoint engineering team to own the enrollment, configuration, security, and retirement of corporate devices. You will manage the full lifecycle of Windows and Mac devices, specifically using Microsoft Intune, Kandji, and Apple Business Manager. Key responsibilities include migrating legacy Group Policy objects to cloud-native configurations, deploying Win32, MSI, and PKG applications, and designing Entra ID Conditional Access policies to enforce device trust. You will build automated, version-controlled workflows using PowerShell, Python, Microsoft Graph, and Git-based pipelines. The role requires deep expertise in MDM solutions, RBAC models, and certificate-based authentication. You will solve technical problems related to endpoint compliance, vulnerability remediation, and identity workflows across Windows, macOS, Linux, and Android platforms to ensure secure access to company resources.

Skills

Microsoft Intune Entra ID Kandji Apple Business Manager PowerShell Python Microsoft Graph API Jamf Pro Group Policy Git Windows macOS Linux Android SAML OAuth OIDC SCEP PKCS ServiceNow

What you'll do

  • Manage end-to-end Intune administration including compliance policies, configuration profiles, and app deployment.
  • Oversee the Apple device lifecycle using Kandji and Apple Business Manager for zero-touch provisioning.
  • Design and enforce Entra ID Conditional Access policies for device compliance and risk-based sign-in.
  • Migrate legacy Group Policy Objects (GPOs) to cloud-native Intune and Entra-based configuration policies.
  • Build and maintain RBAC models across Intune, Entra ID, and Kandji platforms.
  • Develop automation scripts for endpoint and identity workflows using PowerShell, Python, and Microsoft Graph API.
  • Implement and maintain MDM solutions for corporate and BYOD devices across Windows, Mac, Linux, and Android.

What we're looking for

  • 2+ years of experience in systems or endpoint engineering.
  • Hands-on administration of modern MDM solutions including Microsoft Intune and Kandji or Jamf Pro.
  • Deep expertise in Microsoft Intune for compliance policies, configuration profiles, app protection, Autopilot, and RBAC.
  • Experience with Apple Business Manager (ABM) for DEP, VPP, and MDM server integration.
  • Proven experience migrating Group Policy (GPO) logic to cloud-native MDM and compliance policies.
  • Proficiency in Entra ID administration, including Conditional Access policy design and troubleshooting.
  • Scripting proficiency in PowerShell, Python, Shell, and Microsoft Graph API.
  • Knowledge of Windows and macOS architecture, authentication protocols (Kerberos, SAML, OAuth/OIDC), and certificate-based auth.

Related searches

More Endpoint Engineer jobs Endpoint Engineer jobs in Austin All jobs at Apex

More like this

Similar roles

Senior Endpoint Engineer

Apex

Austin, TX 78 days ago
Microsoft Intune Jamf Pro Kandji Apple Business Manager Entra ID Okta Terraform Ansible PowerShell Python Microsoft Graph Azure Functions Logic Apps AWS Lambda GitOps CI/CD GitHub Actions GitLab CI Azure DevOps Win32 MSI PKG DMG SAML OAuth OIDC SCEP PKCS ServiceNow NIST CIS Benchmarks
6+ yrs exp Hybrid
Save

Senior Endpoint Engineer

LoanDepot

Irvine, CA 3 days ago $106,000–$130,000
SCCM Intune JAMF Citrix PowerShell Active Directory Group Policy Windows OS macOS Azure Active Directory VMware vSphere Citrix XenDesktop Microsoft 365 DNS CI/CD Mobile Device Management Application Packaging VDI OneDrive LAN/WAN
7+ yrs exp Hybrid
Save

Senior Systems Endpoint Engineer

Intuit

San Diego, CA 22 days ago $154,000–$208,500
WorkSpace One AWS Azure Python PowerShell DevSecOps GitOps Windows MacOS iOS Android Chrome OS VMware Horizon VDI Citrix Agile Scrum ITIL MFA
5+ yrs exp
Save

Unified Endpoint Management Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL 110 days ago
Microsoft Intune Microsoft Defender MECM SCCM Active Directory Azure AD Microsoft 365 EDR Trellix EDR HBSS Nessus FirePower FireEye Palo Alto FW Conditional Access Endpoint Management Security Baselines Automation
Save

Distinguished Engineer, Endpoint Access Agents

Palo Alto Networks

Santa Clara, CA 23 days ago $248,700–$341,250
C/C++ Windows macOS Linux VPN ZTNA SASE IPsec IKEv2 TLS DTLS QUIC MASQUE CI/CD AI ML Networking Kernel XPC Netlink Telemetry Observability
Save

Endpoint Automation Staff Engineer

GEICO

Palo Alto, CA +3 74 days ago $110,000–$230,000
EDR XDR Security Automation PowerShell Python Bash SIEM Active Directory Entra ID Ansible SCCM Intune Jamf Puppet AWS Azure Google Cloud API Integration Windows Linux macOS
3+ yrs exp
Save