S

SHI International

IT solutions provider for hardware software

Manager – Modern Endpoint Management

System AdministrationConfirmed live in the last 24 hours
Full-time$120k - $150k /yr

About the Job

Requirements

  • Expert-level proficiency with Unified Endpoint Management (UEM) and Mobile Device Management (MDM) platforms, including Microsoft Intune / Endpoint Manager, with familiarity working with VMware Workspace ONE, MobileIron, or similar solutions.
  • Advanced knowledge of Windows operating system deployment, patching methodologies, and associated technologies such as Windows Autopilot.
  • Strong proficiency in scripting and automation, particularly PowerShell, to automate endpoint management and operational workflows.
  • Deep understanding of mobile operating systems, including iOS/iPadOS, Android, and macOS management.
  • Advanced project coordination, stakeholder management, and project scheduling capabilities.
  • Ability to communicate technical concepts effectively to leadership teams and business stakeholders.
  • Experience creating detailed operational reporting, analytics, and performance metrics for endpoint environments.
  • Knowledge of ITIL-based service management and change management practices.
  • Ability to assess risk, prioritize competing initiatives, and execute effectively within complex enterprise environments.
  • Completed Bachelor's degree or equivalent combination of education and relevant work experience.
  • 5+ years of experience in IT Operations with a focus on endpoint and device management.
  • 1+ years of management experience.
  • Strong knowledge of governance frameworks, lifecycle management practices, and operational processes across mobile and desktop environments.
  • Strong understanding of enterprise endpoint security, identity management technologies including Entra ID (Azure AD), and network integration.
  • Proven experience leading cross-functional IT projects and modern endpoint management migrations.
  • Experience with Apple Business Manager and Android Enterprise enrollment programs.
  • Strong experience working with mobile carriers, including Verizon, AT&T, and T-Mobile.
  • Ability to travel 20%.

Responsibilities

  • Define and drive the enterprise endpoint strategy across mobile and desktop platforms, aligned with business, security, and compliance objectives.
  • Establish governance frameworks, policies, and standards for device enrollment, configuration, and management across the enterprise device fleet.
  • Develop and maintain unified endpoint roadmaps focused on scalability, modern management, and operational efficiency.
  • Lead the transition from legacy endpoint management solutions, such as on-premises Group Policy Objects (GPO) and System Center Configuration Manager (SCCM), to cloud-native modern management technologies, including Intune Settings Catalog and ADMX-backed policies.
  • Lead end-to-end device lifecycle management, including procurement, provisioning, deployment, support, refresh, and retirement of mobile and desktop assets.
  • Design and deploy zero-touch provisioning workflows using Windows Autopilot, Apple Automated Device Enrollment (ADE), and Android Enterprise.
  • Maintain standardized operating system deployment images and configuration baselines for Windows 10/11 and macOS environments.
  • Standardize and mature endpoint management processes through the development of key performance indicators (KPIs), standard operating procedures (SOPs), runbooks, and automated workflows to improve service delivery.
  • Drive continuous improvement initiatives that reduce manual operational effort and improve first-time provisioning success rates.
  • Create and manage device compliance policies, configuration profiles, security baselines, and application deployment rings across all supported platforms.
  • Ensure seamless integration with Microsoft 365 security services, including Microsoft Defender for Endpoint, Conditional Access, and Windows Update for Business (WUfB).
  • Implement endpoint protection, encryption technologies such as BitLocker and FileVault, and data loss prevention controls aligned with Zero Trust architecture principles.
  • Monitor and respond to endpoint and mobile security incidents while integrating with security information and event management (SIEM), security operations center (SOC), and mobile threat defense solutions.
  • Package, deploy, and maintain applications through the UEM platform with a focus on automation, version control, and end-user experience.
  • Manage Mobile Application Management (MAM) policies for bring-your-own-device (BYOD) environments and managed application delivery for corporate-owned devices.
  • Identify opportunities to automate and improve workflows across the application delivery lifecycle.
  • Serve as the subject matter expert (SME) for endpoint operations, policies, lifecycle management, and device governance across mobile and desktop platforms.
  • Provide Tier 3 escalation support and technical guidance to Service Desk, Desktop Support, and operational teams.
  • Define, track, and report on KPIs and service-level agreements (SLAs) for endpoint services, including enrollment success rates, compliance rates, patch compliance, and mean time to provision.
  • Manage relationships with mobile carriers, including Verizon, AT&T, and T-Mobile, as well as hardware and original equipment manufacturer (OEM) vendors.
  • Drive cost optimization initiatives, contract alignment, and vendor performance management across device and platform investments.
  • Lead endpoint initiatives focused on process improvement, modern management adoption, and lifecycle optimization.
  • Identify and implement automation opportunities across the endpoint environment to improve consistency and reduce manual effort.
  • Partner with security, infrastructure, and identity management teams to deliver scalable enterprise technology solutions.

Desired Qualifications

  • Microsoft Certified: Endpoint Administrator Associate.
  • Microsoft 365 Certified: Modern Desktop Administrator Associate.
  • Experience with key performance indicator (KPI) reporting and analytics tools such as ServiceNow and Power BI.
  • Familiarity with Zero Trust architecture, Conditional Access, and mobile threat defense solutions.
  • Experience integrating Microsoft Intune with Microsoft Defender for Endpoint and Conditional Access capabilities.

About the Company

SHI International

IT solutions provider for hardware software

SHI International helps organizations manage technology by selecting, deploying, and managing IT across cybersecurity, cloud, and everyday hardware and software needs. It started in 1989 as a software reseller and pivoted in the early 2000s to include hardware after a large-scale laptop deployment, shaping it into a full-service IT provider. Today, it is a $16 billion global firm with over 7,000 employees and is the largest MWBE in the United States. The company grows through strategic acquisitions and focuses on emerging technologies such as generative AI and cybersecurity to expand its capabilities. Its goal is to deliver comprehensive IT solutions and services to customers while expanding its reach and staying close to evolving technology needs.

Company size
5,001-10,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Franklin Township, NJ
Founded
1989

Recently Posted Jobs

Explore more opportunities at SHI International

See more jobs