Senior Endpoint Engineer

What you'll do

• Own the end-to-end management of Microsoft Intune for Windows devices, including compliance, configuration profiles, and Autopilot.
• Manage the Apple lifecycle using Jamf Pro or Kandji and Apple Business Manager for zero-touch enrollment.
• Ship MDM policies as code using a GitOps model with tools like Terraform, Ansible, or IntuneCD.
• Build integrations and automation across MDM and cloud platforms using PowerShell, Python, and Microsoft Graph API.
• Design and enforce Conditional Access policies for Entra ID and Okta to secure device trust.
• Automate patching and third-party app updates to remediate vulnerabilities and close exposure windows.
• Package and deploy Win32, MSI, PKG, and DMG applications with full dependency and rollback planning.
• Serve as the technical escalation point for complex endpoint incidents and perform root-cause analysis.

What we're looking for

• Bachelor's degree in computer science or a related technical discipline, or equivalent work experience.
• 6+ years of experience in endpoint or systems engineering.
• Hands-on administration experience with Microsoft Intune and an Apple MDM such as Jamf Pro or Kandji.
• Experience with Apple Business Manager for automated enrollment, VPP, and MDM server integration.
• Proven experience with policy-as-code and GitOps using tools like Terraform, Ansible, or Bicep.
• Proficiency in PowerShell, Python, and the Microsoft Graph API for automation and integrations.
• Experience with Entra ID administration, including Conditional Access design and hybrid identity.
• Experience with vulnerability management, patching tools, and app packaging (PSADT, IntuneWin, PKG).