Endpoint Engineering Staff Engineer II

Job Title: Endpoint Engineering Staff Engineer II

Location: Phoenix, AZ

Employment Type: Full-time

Job Description:

Endpoint Engineering Staff Engineer II

Job Summary

As an IT Staff Engineer 2 within Endpoint Engineering, you will serve as a senior technical authority focused on Azure Virtual Desktop (AVD), modern endpoint management, and enterprise End-User Computing (EUC) ecosystems. This role leads the architecture support, deployment, optimization, and Tier 3/4 escalation support for secure virtual and physical endpoint solutions using AVD, Nerdio, Microsoft Intune, MECM/SCCM, Active Directory, Entra ID, Group Policy, and automated orchestration workflows.

Must Have Technical/Functional Skills

Experience & Education:

7+ years of relevant engineering experience across Endpoint Engineering, End User Computing, Cloud Infrastructure, or IT Systems Engineering.

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent practical experience).

Virtual Desktop Infrastructure (VDI / AVD):

Advanced hands-on experience designing, administering, and troubleshooting Azure Virtual Desktop (AVD).

In-depth expertise with AVD host pools, multi-session/single-session hosts, golden image pipelines, and FSLogix profile containers/Cloud Cache.

Deep understanding of Azure storage (Azure Files, Azure NetApp Files), performance tuning, and digital user experience monitoring.

Modern Endpoint Management & Deployment:

Advanced proficiency with Nerdio Manager for enterprise AVD management and scaling.

Hands-on administration of Microsoft Intune, Windows Autopilot, and MECM/SCCM (application packaging, patching coordination, configuration baselines, compliance policies).

Comprehensive knowledge of Windows 10/11 OS lifecycle management and cloud-managed device strategies.

Identity, Access & Directory Services:

Advanced working knowledge of Active Directory, Entra ID (Azure AD), Group Policy Objects (GPO), hybrid identity, and conditional access policies.

Scripting & Automation:

Advanced PowerShell scripting for automated system configuration, endpoint remediation, repeatable workflows, and API-driven task execution.

Governance, Security & Risk:

Strong understanding of security baselines (CIS/NIST), IT controls, change management (ITIL), audit readiness, and compliance within regulated enterprise environments.

Roles & Responsibilities

Engineering & Platform Optimization:

Lead complex Endpoint Engineering and AVD initiatives with minimal supervision from design and testing through enterprise deployment and operational support.

Engineer, administer, troubleshoot, and fine-tune AVD components, including host pool allocation, session host performance, golden images, and FSLogix storage tiers.

Enhance reliability, security baselines, telemetry, and automated recovery procedures across endpoint and virtual desktop environments.

Modernization & Lifecycle Management:

Drive modern endpoint strategies utilizing Intune, Autopilot, and cloud-native management to reduce reliance on legacy infrastructure.

Oversee MECM/SCCM software distribution, OS deployments, security patch management, and endpoint compliance reporting.

Evaluate solution architectures, third-party integrations, risk profiles, licensing costs, and long-term operational supportability.

Tier 3 / Tier 4 Escalation Support:

Provide senior-level escalation support for complex incidents involving virtual desktops, profile corruption, identity sync, networking, and application delivery.

Participate in rotational on-call support for critical operational incidents.

Cross-Functional Collaboration & Documentation:

Partner closely with Cloud Architecture, Information Security, Network Infrastructure, and Service Desk teams to resolve cross-domain platform issues.

Develop, review, and maintain comprehensive technical documentation, architecture diagrams, runbooks, standard operating procedures (SOPs), and automated scripts.

Mentor junior and mid-level engineers, fostering engineering consistency and operational excellence across the team.

Preferred Qualifications

Experience with AVD cost-optimization models, autoscaling logic, capacity planning, and storage migration workflows.

Hands-on experience with thin-client management platforms (e.g., IGEL OS / UMS), hardened endpoints, and secure contractor access architectures.

Experience with Digital Employee Experience (DEX) platforms, proactive remediation frameworks, or remote support tools (e.g., TeamViewer).

Domain experience within Financial Services, Banking, or other highly regulated industries.

Relevant industry certifications: Microsoft Certified: Azure Fundamentals (AZ-900), Azure Administrator Associate (AZ-104), or relevant Intune/MECM/PowerShell credentials.