Engineer III, Endpoint Engineering

Description

The company works in health, and this is a senior role focused on Active Directory, Group Policy and Intune policy for endpoints and users.

You will design and refine endpoint solutions at scale for a large global workforce, working across time zones with little day-to-day direction.

Responsibilities

• Design, build and run Active Directory and Group Policy so endpoints and users work across the global organization.
• Shape Intune policies for endpoints and users so they match business goals and compliance standards.
• Move on-premises policies to cloud services, mainly Intune, and prepare for a later move to Microsoft Entra.
• Turn application owners' business needs into endpoint policies that balance usability, security and operations.
• Make endpoint policies scale for an organization with tens of thousands of users and endpoints.
• Run and tune MECM, Intune, Jamf for macOS and NinjaOne for remote monitoring and management.
• Use Microsoft cloud-native tools, including Microsoft Graph API, to automate endpoint tasks.
• Troubleshoot complex issues on Windows, macOS and mobile devices.
• Track new endpoint technology and trends to keep improving the endpoint strategy.
• Work with infrastructure, application and business teams to deliver endpoint solutions.
• Speak for end users in cross-domain discussions and reduce disruption when policies change.
• Handle ad-hoc security requests with the security team while keeping usability in view.
• Connect infrastructure and security teams so endpoint work stays clear and aligned.
• Help the security team bring endpoint policy in line with CIS Levels 1 and 2 benchmarks.
• Advise on endpoint hardening that keeps systems secure, resilient and compliant without hurting the user experience.
• Join security meetings when needed to contribute endpoint expertise.
• Act as the subject matter expert for Active Directory, Group Policy and Intune, and mentor junior engineers.
• Explain technical topics clearly to non-technical stakeholders.
• Lead strategic endpoint initiatives that match organizational goals and priorities.

Requirements

• 20+ years in endpoint engineering, mainly on Active Directory, Group Policy and Intune policy for endpoints and users.
• Proven experience running MECM, Intune, Jamf, NinjaOne and similar endpoint tools.
• Proven record of moving on-premises policies to the cloud, mainly Intune, and preparing for a Microsoft Entra migration.
• Experience with Microsoft cloud-native technology, including Microsoft Graph API and Azure Active Directory, for endpoint management and automation.
• Strong troubleshooting across endpoint platforms, operating systems and user domains.
• Experience in large global organizations with tens of thousands of users and endpoints, including integrated and non-integrated entities.
• Self-starter who manages many responsibilities, projects and demands across several time zones.
• Able to work independently with little oversight while staying accountable and focused.
• Works well across domains and levels, aligning infrastructure, security and business teams.
• Deep understanding of Active Directory, Group Policy, Intune policy and endpoint platforms.
• Puts user experience first in policy design and implementation.
• Solves complex endpoint problems.
• Explains technical ideas clearly to non-technical people.
• Preferred: experience in enterprise-scale environments with complex endpoint requirements.
• Preferred: certifications such as Microsoft Certified: Endpoint Administrator Associate, Azure Solutions Architect, or similar.
• Preferred: strong familiarity with Microsoft Entra and its role in endpoint and identity management.

Conditions

Full-time position.

Benefits

• Medical, dental and vision coverage.
• Wellness support across physical, emotional, financial and social health.
• Family support, including backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave and paid caregiver leave.
• Training programs, professional development, mentorship, employee resource groups and volunteer activities.