Full-Time
Endpoint Engineer
Syncreon Consulting
No salary listed
Palo Alto, CA, USA
In Person
Category
 Software Engineering (1) |
|---|
Required Skills
PowerShell
Bash
Microsoft Azure
Microsoft Intune
iOS/Swift
Requirements
- Experience: Minimum 3–5 years in an Endpoint Engineering or MDM-focused role.
- Jamf Mastery: Proven experience managing both macOS and iOS at scale via Jamf Pro.
- Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.
- VDI Expertise: Hands-on experience with Amazon WorkSpaces administration.
- BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).
- Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.
- Identity: Understanding of Okta or Azure Active Directory (Entra ID) as it relates to device enrollment and SSO.
Responsibilities
- Unified Endpoint Management (UEM): Daily Operations entail daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.
- Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.
- Apple Fleet: Architect and maintain the Jamf Pro environment for all macOS and iOS devices; manage configuration profiles, policies, and patch management.
- Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.
- Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.
- VDI: Administer and optimize Amazon WorkSpaces; manage WorkSpaces directories, custom bundles, and image creation/maintenance; troubleshoot connectivity and performance issues within the AWS ecosystem.
- Automation & Engineering: Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs; build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment; implement automated reporting for hardware inventory, license compliance, and security auditing.
- Security & Compliance: Enforce endpoint security standards, including FileVault/BitLocker encryption and EDR agent health; partner with Security teams to remediate vulnerabilities across the endpoint fleet.