Endpoint Engineer

LanceSoft Inc

Palo Alto, CA

JOB DETAILS
SALARY
$55–$75 Per Hour
SKILLS
Amazon Web Services (AWS), Android, Apple, Application Programming Interface (API), Applications Security, Artificial Intelligence (AI), Automation, Bash Scripting, Best Practices, Cellular Telephone, Cloud Computing, Computer Science, Computer Security, Configuration Management, Consumer Software, Cryptography, Customer Support/Service, Debugging Skills, Desktop PC, Desktop Virtualization, Ecosystems, Endpoint Security, GitHub, Hardware Virtualization, IDE (Integrated Development Environment), Inventory Reports, License Management, Licensing Compliance, Mac Operating System, Machine Tool, Maintain Compliance, Manufacturing Data Management, Microsoft Product Family, Microsoft Windows Azure, Microsoft Windows Operating System, Network Support, Onboarding, Operations, Organizational Development/Management, Product/Service Launch, Python Programming/Scripting Language, Scripting (Scripting Languages), Security Auditing, Security Compliance, Security Policy, Single Sign-On (SSO), Software Patches, System Integration (SI), Systems Maintenance, Vehicle Fleets, Web Client Plug-ins, Windows PowerShell, Writing Skills, iOS
LOCATION
Palo Alto, CA
POSTED
30+ days ago
The Endpoint Engineer is responsible for the design, implementation, and ongoing management of the organizations device ecosystem. This role focuses on automating the lifecycle of hardware and virtual desktops to ensure a seamless, secure, and "zero-touch" experience for our global workforce. You will serve as the subject matter expert for Apple and Windows management and our cloud desktop infrastructure.
 
Technical Environment:
Apple (macOS & iOS): Jamf Pro
Windows & Android: Microsoft Intune / Endpoint Manager
Virtual Desktop: Amazon WorkSpaces (AWS)
Scripting: PowerShell, Bash, Python
 
Key Responsibilities
1. Unified Endpoint Management (UEM)
  • Daily Operations: Perform daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.
  • Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.
  • Apple Fleet: Architect and maintain the Jamf Pro environment for all macOS and iOS devices. Manage configuration profiles, policies, and patch management.
  • Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.
  • Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.
 2. Virtual Desktop Infrastructure (VDI)
  • Administer and optimize Amazon WorkSpaces.
  • Manage WorkSpaces directories, custom bundles, and image creation/maintenance.
  • Troubleshoot connectivity and performance issues within the AWS ecosystem.
 3. Automation & Engineering
  • Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs.
  • Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment.
  • Implement automated reporting for hardware inventory, license compliance, and security auditing.
 4. Security & Compliance
  • Enforce endpoint security standards, including FileVault/BitLocker encryption and EDR agent health.
  • Partner with Security teams to remediate vulnerabilities across the endpoint fleet.
 Required Qualifications:
  • Experience: Minimum 35 years in an Endpoint Engineering or MDM-focused role.
  • amf Mastery: Proven experience managing both macOS and iOS at scale via Jamf Pro.
  • Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.
  • VDI Expertise: Hands-on experience with Amazon WorkSpaces administration.
  • BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).
  • Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.
  • Identity: Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO.
 Education & Certifications:
  • Bachelors degree in Computer Science, IT, or equivalent professional experience.
  • Relevant certifications (e.g., Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner) are a plus.
  • Bonus: AI Tool Deployment Experience
 As client continues to expand its AI-powered workforce tooling, experience deploying and managing enterprise AI tools is a strong differentiator for this role. Candidates with hands-on experience rolling out any of the following will stand out:
 
Enterprise AI Search & Knowledge Tools
Experience deploying Glean or similar AI-powered enterprise search platforms, including connector configuration, SSO integration (Okta/Azure AD), and end-user onboarding at scale.
 
Agentic AI Coding Tools
Familiarity with deploying Claude Code or GitHub Copilot to engineering teams including managing licensing, IDE plugin distribution via MDM (Jamf/Intune), and API key or credential management through secure vaulting solutions.
 AI Productivity & Workflow Automation Tools
Experience rolling out AI desktop or productivity agents such as Claude Cowork, including packaging and silent deployment, managing update cadences, and coordinating with IT Security to ensure compliance with data handling policies.
 General AI Deployment Best Practices
 Understanding of the endpoint and identity considerations unique to AI tools: network allowlisting for LLM API endpoints, DLP policy tuning for AI-generated content, user provisioning workflows, and communicating rollout plans across IT, Security, and end-user teams.

About the Company

L

LanceSoft Inc

We are a $125 Million, NMSDC-certified Minority & Woman owned Workforce Solutions Company headquartered in the DC metro area with presence across US with global presence - Canada, Mexico, India, UK, Malaysia, Indonasia, Hongkong, Singapore, UAE. We are specialized in providing Workforce Solutions, SOW project delivery, Engineering Solutions, Creative Services. We currently support 100+ Fortune companies globally and across multiple industry segments. We are currently supporting several massive programs across industry segment nationally/globally (Intel, Ally, AMD, QUALCOMM, Morgan Stanley, Kraft/ Mondelez, MNP, Amdocs, Dell, SanDisk, Medtronic, Becton Dickinson, GE, Lockheed Martin, UTC, L-3 Communications, Caterpillar, BMW, Mercedes Benz, National Grid, Dominion, Energy Future Holdings, PSEG, 3M, Fidelity, Aetna, Humana, Johnson & Johnson, Pfizer, Merck etc). 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, identity, national origin, disability, or protected veteran status.

COMPANY SIZE
2,000 to 2,499 employees
INDUSTRY
Staffing/Employment Agencies
FOUNDED
2000
WEBSITE
http://www.lancesoft.com/