Lead Endpoint Engineer

Overview

We are seeking a highly skilled and experienced Intune and Jamf Endpoint Engineer with expertise in Active Directory and AzureAD/EntraID. The role will manage the team responsible for developing MDM tools, providing a solid experience for our employees while also improving security around our endpoints.

The ideal candidate will be dedicated to fostering a collaborative and innovative environment, actively participating in cross-functional projects to ensure seamless integration of endpoint management solutions with other IT infrastructure. They will continuously evaluate and refine methods to enhance productivity, security, and user satisfaction, demonstrating a commitment to operational excellence.

As a proactive problem solver, they will anticipate potential issues, devise strategic solutions, and ensure the resilience of endpoint systems. By leveraging their deep technical knowledge and leadership skills, this individual will play a crucial role in driving the organization's endpoint management strategy forward, effectively balancing the needs for robust security with user-centric design.

Responsibilities

• Design, implement, and manage endpoint management solutions using Intune and Jamf Pro for various devices, including Windows, macOS, iOS, and iPadOS.
• Manage a staff of 2 to deliver on goals set by yourself, management, and the business.
• Collaborate with the IT security team to implement security measures, manage device compliance following best practices, and respond to security incidents. Configure and manage policies, profiles, and security settings to ensure compliance.
• Keep abreast of the latest technologies and endpoint management and security trends, and recommend improvements to existing processes and technologies.
• Work with the Help Desk team and user feedback to continually improve the user experience on endpoints and software management. Develop tools to make the team more efficient through automation and logic rules.
• Document configurations, procedures, and changes to maintain an up-to-date IT environment.
• Develop and maintain scripts (PowerShell, Bash, etc.) to automate tasks and enhance system efficiency.
• Develop user support automation around self-service tools in Jamf and Intune, such as automatic license provisioning and approval flows.
• Attend training to learn the latest developments in these tools and how to implement them if appropriate.

Qualifications

• Experience in endpoint management using Intune and Jamf Pro, preferably 5+ years.
• Strong understanding of Active Directory and Entra-ID / AzureAD, including experience with identity and access management.
• High proficiency with standard PC and Mac scripting languages such as Powershell and Bash, and must be comfortable creating complex ones for automation.
• Some knowledge of network protocols, IP networking, and security principles.
• Experience with cloud services (preferably Microsoft Azure) and understanding of SaaS, PaaS, and IaaS models.
• Strong communication and interpersonal skills, with the ability to interact effectively with team members and stakeholders at all levels. Comfortable speaking with end-users to collect their feedback and offer help.
• Comfortable managing a team of Client Engineers and assisting the help desk team directly to achieve goals and support incidents.
• Relevant certifications (e.g., Microsoft Certified: Security, Compliance, and Identity Fundamentals, Jamf Certified Administrator) are a plus.
• Proficiency in scripting languages such as PowerShell and Bash are also a plus.

Pay and benefits

The base salary range for this position is $135,000-$155,000 per year which represents the current range for the base salary for this exempt position. Please note that actual salaries will vary based on factors including but not limited to location, experience, and performance. As such, on occasion and when applicable, there is the possibility that the final, agreed-upon base salary may be outside of the upper end of the range.

Please also note the range listed is just one component of the company's total rewards package for exempt employees. Other rewards may include performance bonuses, long term incentives, a PTO policy, and many other progressive benefits.

#LI-HW3

For CA residents, Job Applicant Privacy Policy HERE.