Endpoint Automation Engineer

Triune Infomatics

santa clara, CA

JOB DETAILS
SKILLS
ARM (Advanced RISC Machine), Audiovisual, Automation, Automation Engineering, Benchmarking, Cloud Computing, Continuous Deployment/Delivery, Continuous Integration, Customer Support/Service, Endpoint Security, Firewalls, Microsoft Exchange Server, Microsoft Product Family, Microsoft Windows Azure, Microsoft Windows Operating System, Onboarding, Operations Processes, Scripting (Scripting Languages), Security Compliance, Security Policy, Technical Support, Win32 API (Application Programming Interface), Windows PowerShell
LOCATION
santa clara, CA
POSTED
30+ days ago
Role: Endpoint Automation Engineer (Intune, Entra ID, PowerShell)
Location: Onsite Santa Clara, CA (5 days/week)
Duration: 3 6 Months Contract


Job Summary: We are seeking a highly skilled Endpoint Automation Engineer to lead enterprise-wide modernization and automation of endpoint management. This role demands deep hands-on expertise in Microsoft Intune, PowerShell automation, Microsoft Entra ID, and endpoint lifecycle automation. The ideal candidate will drive zero-touch provisioning, security compliance, and operational efficiencies.

Key Responsibilities:
  • Endpoint Management & Automation
    • Lead enterprise deployment/configuration of Microsoft Intune
    • Automate device provisioning, compliance, and lifecycle workflows
    • Package/deploy apps (Win32, MSIX, LoB); manage Autopilot, PSADT, PPKG
    • Create/maintain configuration profiles, compliance policies, and baselines
  • Microsoft Entra ID Administration
    • Manage Entra ID (Azure AD), implement SCIM, Conditional Access, RBAC
    • Strengthen identity governance and compliance
  • PowerShell Scripting & Automation
    • Build secure, reusable PowerShell scripts for device/app onboarding, compliance remediation, and reporting
    • Maintain version-controlled script repository and CI/CD pipelines
  • Cloud & M365 Integration
    • Leverage Microsoft 365 tools (Defender, Exchange, Teams, etc.)
    • Support Azure-based device registration and configuration
    • (Preferred) Apply IaC practices using ARM, Bicep, Terraform
  • Endpoint Security & Compliance
    • Align with CIS benchmarks for Windows 11
    • Ensure BitLocker, AV, firewall, and security compliance via policy and automation
  • Collaboration & Support
    • Act as Tier-3 escalation point for IT End User Services
    • Document and enhance EUS workflows through automation

Required Qualifications:
  • 5+ years in endpoint automation and modern device management
  • Expert-level experience with Microsoft Intune, PowerShell, and Entra ID
  • Experience with Windows 10/11, Autopilot, PSADT, and PPKG provisioning
  • Familiarity with Microsoft 365 and Azure services for endpoint security

Preferred:
  • Certifications: MD-102, AZ-104, SC-300, AZ-400
  • Infrastructure as Code (IaC) experience with ARM/Bicep/Terraform
  • Exposure to Defender for Endpoint, Log Analytics, and Sentinel

About the Company

T

Triune Infomatics