Senior End point migration engineer-W2

Role Summary 

We are looking for a hands-on Senior Endpoint Migration Engineer to support Windows endpoint migration across multiple client locations in the USA. The engineer will support device preparation, provisioning/re-imaging, Intune and Autopilot, application deployment, Active Directory onboarding, Tanium, security tools, user validation and migration troubleshooting. 


Key Responsibilities 
Provide onsite technical support for endpoint migration waves, including device preparation, re-imaging/provisioning, cutover, user validation and stabilization. 
Validate device inventory and readiness, including hardware compatibility, TPM, SecureBoot, firmware/BIOS and other migration prerequisites. 
Configure and troubleshoot Windows Autopilot, including device registration, profile assignment, OOBE, Enrollment Status Page (ESP), failed/stalled provisioning, wipe/reset and re-provisioning. 
Administer and troubleshoot Microsoft Intune, including enrollment, profiles, device groups, application assignments, compliance, remote actions, Intune Management Extension (IME) and Win32 application deployment. 
Troubleshoot application deployment and packaging issues, including MSI/EXE, PowerShell, detection rules, dependencies, installation failures and logs. 
Support Active Directory onboarding and troubleshoot domain/offline domain join, computer objects/OUs, DNS, domain-controller connectivity, secure channel, Group Policy and first user sign-in. 
Use PowerShell, Event Viewer, dsregcmd, nltest, nslookup, ipconfig, gpresult and endpoint logs for troubleshooting. 
Install, validate and troubleshoot Tanium Client, client registration/check-in, connectivity and endpoint health. 
Troubleshoot software/application deployments through Tanium, including failed package/action execution and deployment-status issues. 
Support CrowdStrike Falcon installation and endpoint health troubleshooting; coordinate platform-level issues with the security team. 
Have working knowledge of Netskope Client and pre-logon/device connectivity and troubleshoot endpoint-side connectivity issues affecting migration or first sign-in. 
Troubleshoot basic endpoint network dependencies including Internet, DNS, DHCP/IP, LAN/Wi-Fi and domain-controller connectivity, and escalate network-side issues when required. 
Support SecureBoot/firmware remediation, printer configuration, drivers/peripherals and local workstation dependencies. 
Validate required applications and endpoint security/management tools after migration and confirm overall user/device readiness. 
Capture logs and error details, resolve migration issues where possible, and coordinate/escalate with endpoint, identity, network, security and application teams. 
Maintain troubleshooting notes, migration procedures and support/runbook updates and provide knowledge transfer during handover. 

Required Skills 
Strong hands-on Microsoft Intune administration and troubleshooting. 
Deep hands-on Windows Autopilot, OOBE and ESP troubleshooting. 
Strong Windows 10/11 endpoint engineering and troubleshooting. 
Strong Intune Win32 application deployment and IME troubleshooting. 
Hands-on Tanium experience, including troubleshooting Tanium client and software/package deployment issues. 
Good Active Directory, domain join, DNS, Group Policy and Windows authentication troubleshooting knowledge. 
Good PowerShell and Windows troubleshooting skills. 
Hands-on enterprise endpoint migration, deployment or re-imaging experience. 
Ability to independently troubleshoot onsite and identify when issues require escalation to identity, network, security or application teams. 
Willingness and ability to travel frequently across client offices/sites throughout the USA. 

Good to Have 
CrowdStrike Falcon endpoint deployment and troubleshooting. 
Netskope Client / Netskope SSE and pre-logon connectivity knowledge. 
PSADT / Windows application packaging experience. 
BitLocker, TPM, SecureBoot, printer/peripheral and driver troubleshooting. 

Experience 
7+ years of Windows endpoint / EUC engineering experience, with strong hands-on experience in Microsoft Intune and Windows Autopilot. Experience supporting enterprise endpoint migrations or large device deployments is preferred. 
Nice-to-Have Certifications 
Microsoft Certified: Endpoint Administrator Associate (MD-102). 
Relevant Tanium technical/administrator certification or formal Tanium training. 
Recruitment Screening Note 
Please prioritize hands-on endpoint engineers rather than profiles focused mainly on Desktop Support / Service Desk. The candidate should be able to independently troubleshoot Intune, Autopilot, Windows/AD/DNS and Tanium client/application deployment issues during onsite migration waves. Frequent USA travel is required.