Senior Endpoint Engineer

Job Summary

The End-Point Engineer Sr. is a senior hands-on engineer on the End-User Computing team for the Mosaic Infrastructure Managed Services engagement, supporting roughly 11,000+ managed endpoints across the United States, Canada, Brazil, Peru, and Paraguay. Working under the direction of the End-Point Lead/Architect, this role executes and improves the day-to-day engineering of the SCCM (Configuration Manager/MECM) and Microsoft Intune platforms - application packaging, OS deployment, patching, compliance policies - and plays a hands-on role in the account's migration from traditional SCCM-based management to modern, cloud-first Intune management.

Responsibilities

• Administer and maintain the SCCM/MECM environment: collections, deployments, OS deployment (OSD) task sequences, and distribution point health.
• Administer Microsoft Intune: device configuration profiles, compliance policies, app deployments, and Windows Autopilot provisioning.
• Package, test, and deploy applications across the managed endpoint estate, maintaining packaging standards and documentation.
• Execute endpoint patch management cycles, monitoring deployment success rates and remediating failures.
• Support the migration of endpoints from SCCM-based management to Intune modern management, executing migration waves under the roadmap set by the End-Point Lead/Architect.
• Serve as an escalation point for complex endpoint incidents from the Service Desk and field services, driving root cause resolution.
• Build and maintain endpoint security baseline configurations in coordination with Security requirements.
• Develop scripts and automation to streamline endpoint management tasks (PowerShell).
• Mentor the End-Point Engineer Jr. on platform administration, packaging, and troubleshooting practices.
• Maintain accurate documentation of endpoint configurations, standards, and procedures.
• Support hardware refresh and large-scale deployment projects, including imaging and provisioning logistics coordination.

Skills and Experience

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 4+ years of hands-on endpoint engineering experience in enterprise environments.
• Strong hands-on expertise with SCCM/MECM, including OSD, application packaging, and patch management.
• Hands-on experience with Microsoft Intune, including configuration profiles, compliance policies, and Windows Autopilot.
• Proficiency in PowerShell scripting for endpoint automation.
• Working knowledge of Entra ID (Azure AD) concepts relevant to endpoint management (hybrid join, conditional access).
• Strong troubleshooting skills across Windows client OS, drivers, and application behavior.
• Strong verbal and written communication skills in English.

Preferred Qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate or equivalent certification.
• Experience executing SCCM-to-Intune co-management or migration programs.
• Experience supporting macOS or mobile devices (iOS/Android) under MDM.
• Experience in a managed services environment supporting enterprise clients.
• Bilingual English/Spanish or English/Portuguese a plus.

Technical Skills & Tools

• SCCM/MECM administration (collections, OSD, packaging, patching).
• Microsoft Intune / Windows Autopilot.
• PowerShell scripting.
• Entra ID (Azure AD) fundamentals for endpoint management.
• ITSM/ticketing platforms (ServiceNow or equivalent).

#LI-FV1