Position: Endpoint Engineer
Duration: 6 months that may extend
Manager Notes
- Heavy SCCM/MECM utilization:
- Packaging and deploying of applications/packages/task sequences
- SCCM Client Health checking and remediation
- Heavy PowerShell knowledge, including RemotePS
- Vulnerability Remediation processes desired, i.e. Tenable or Defender (Tenable preferred)
- Knowledge of EUC tools is beneficial, but not necessary (and does NOT outweigh the above, even in bulk):
- AVD
- Digital Experience Monitoring
- Secure Enterprise Browsing
- Endpoint Management
Position Summary
The ideal candidate is a hands-on Endpoint Engineer who enjoys building and supporting enterprise endpoint solutions through automation, software deployment, and systems management. This individual is comfortable working in a large-scale Windows environment, possesses strong PowerShell scripting skills, and has experience leveraging SCCM to deploy applications, maintain endpoint health, and support vulnerability remediation efforts. The successful candidate is collaborative, detail-oriented, and thrives in a team environment while partnering closely with the Desktop Engineering Led to improve endpoint reliability, security, and operational efficiency
The Endpoint Engineer is responsible for the engineering, administration, and ongoing support of the organization's Windows endpoint environment. This role focuses on Microsoft Endpoint Configuration Manager (MECM/SCCM), application packaging and deployment, PowerShell automation, endpoint health, and vulnerability remediation to ensure secure, reliable, and efficient endpoint operations across the enterprise.
Working under the direction of the Desktop Engineering Lead, the Endpoint Engineer partners with Desktop Support, Infrastructure, Security, and End User Computing (EUC) teams to deploy enterprise software, automate endpoint management, maintain endpoint compliance, and resolve complex technical issues.
Key Responsibilities
- Administer and support Microsoft Endpoint Configuration Manager (MECM/SCCM) in a large enterprise environment.
- Package, test, and deploy enterprise applications using SCCM application packages, task sequences, and software deployment methodologies.
- Create, maintain, and troubleshoot SCCM task sequences for operating system and application deployments.
- Monitor SCCM client health and perform proactive remediation to ensure endpoint reliability and compliance.
- Develop, maintain, and optimize PowerShell scripts to automate endpoint administration, software deployments, system maintenance, and operational processes.
- Utilize Remote PowerShell to perform enterprise-scale endpoint administration and troubleshooting.
- Partner with Cybersecurity teams to remediate endpoint vulnerabilities identified through vulnerability management platforms such as Tenable or Microsoft Defender.
- Analyze deployment failures, client health issues, and endpoint performance problems, implementing corrective actions to improve service reliability.
- Collaborate with Desktop Support and Infrastructure teams to resolve complex endpoint issues and support enterprise technology initiatives.
- Maintain technical documentation, deployment procedures, and operational standards.
- Participate in endpoint lifecycle management, Windows operating system deployments, and enterprise endpoint modernization initiatives.
- Required Qualifications
- 4+ years of experience supporting enterprise Windows endpoint environments.
- Strong hands-on experience administering Microsoft Endpoint Configuration Manager (MECM/SCCM).
- Experience packaging, deploying, and maintaining enterprise software deployments.
- Experience creating and supporting SCCM Task Sequences.
- Strong PowerShell scripting skills, including Remote PowerShell administration.
- Experience troubleshooting SCCM client issues and performing client health remediation.
- Experience supporting enterprise Windows operating systems.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal communication skills.
- Preferred Qualifications
- Experience with vulnerability remediation using Tenable, Microsoft Defender, or similar vulnerability management platforms.
- Experience supporting Microsoft Defender for Endpoint.
- Familiarity with Microsoft Intune and modern endpoint management concepts.
- Experience with Windows Autopilot.
- Knowledge of Microsoft Azure Virtual Desktop (AVD).
- Experience with Digital Experience Monitoring (DEX) platforms such as Nexthink, ControlUp, or Lakeside SysTrack.
- Familiarity with Secure Enterprise Browsing solutions.
- Experience working within enterprise End User Computing (EUC) environments.
Required
- Microsoft Endpoint Configuration Manager (MECM/SCCM)
- Application Packaging
- Software Deployment
- SCCM Task Sequences
- SCCM Client Health
- PowerShell
- Remote PowerShell
- Windows 10/11
- Endpoint Troubleshooting
Preferred
- Tenable
- Microsoft Defender for Endpoint
- Microsoft Intune
- Azure Virtual Desktop (AVD)
- Digital Experience Monitoring (DEX)
- Secure Enterprise Browsers
- Windows Autopilot
- Endpoint Management
- Ideal Candidate
Suggested Job Titles
Any of the following would accurately reflect this role:
- Endpoint Engineer (recommended)
- Microsoft Endpoint Engineer
- Windows Endpoint Engineer
- Endpoint Management Engineer
- EUC Endpoint Engineer
- Systems Engineer – Endpoint Management
Never miss an opportunity! Create an alert based on the job you applied for.
