Systems Engineer, Endpoint & Cloud Integration

What you'll do

• Manage end-to-end Intune administration including compliance policies, configuration profiles, and automated app deployment.
• Oversee Apple device lifecycles using Kandji and Apple Business Manager for zero-touch provisioning.
• Design and enforce Entra ID Conditional Access policies based on risk, location, and device compliance.
• Migrate legacy Group Policy Objects (GPOs) to modern, cloud-native Intune and Entra configuration policies.
• Build and maintain least-privilege RBAC models across Intune, Entra ID, and AWS environments.
• Develop AWS Lambda functions and scripts in PowerShell or Python to automate device lifecycle and synchronization workflows.
• Provision all infrastructure using Infrastructure as Code (Terraform, Ansible, or CloudFormation) via version-controlled repositories.
• Implement and maintain MDM solutions for a diverse fleet of Windows, Mac, Linux, and Android devices.

What we're looking for

• Bachelor's degree in Computer Science or a related technical discipline (or equivalent experience).
• 2+ years of experience in systems/endpoint engineering including Intune and AWS infrastructure administration.
• Expertise in Microsoft Intune, Kandji or Jamf Pro, and Apple Business Manager for device lifecycle management.
• Experience with Entra ID administration, Conditional Access policy design, and RBAC modeling across Microsoft and AWS environments.
• Proficiency in Infrastructure as Code (Terraform, Ansible, or CloudFormation) and Git-based version control.
• Scripting proficiency in PowerShell, Python, Shell, and the Microsoft Graph API.
• Expertise in Windows/macOS architecture, authentication protocols (SAML, OAuth, Kerberos), and Linux administration.
• Relevant certifications in Microsoft, Apple, or AWS are preferred; experience with Okta or security frameworks is preferred.