Senior Endpoint Management Engineer

Benefits: Medical, Dental, and Vision insurance, 401k, sick leave, and employee assistance program. Depending on your package selection, Averro offers PTO, paid holidays, and legal insurance.

ROLE & RESPONSIBILITIES

We are seeking a Senior Endpoint Management Engineer for a professional services engagement supporting an enterprise endpoint modernization and migration initiative. The clients current environment runs on ManageEngine Endpoint Central. The engineer will assess that environment, extract existing configurations, map capabilities to the target platforms, and execute the full migration - splitting by device type, with Microsoft Intune owning Windows (and select macOS), and Jamf Pro owning macOS and Apple mobile devices.

This is a migration delivery role, not a steady-state administration role. Candidates who have only administered Intune or Jamf Pro in an existing environment will not meet the requirement. We are looking for someone who has actually moved a device fleet from one platform to another - including pilot design, wave planning, production rollout, troubleshooting, and rollback.

Assess the current-state ManageEngine Endpoint Central environment including device inventory, enrollment methods, policy assignments, application deployment, patching, security settings, and dependencies

Design migration waves based on device type, OS, business criticality, user population, and technical dependencies - including pilot, validation, rollback, communications, and production migration procedures

Execute and troubleshoot endpoint migrations from ManageEngine Endpoint Central to Microsoft Intune and Jamf Pro with minimal user disruption

Configure and deploy Microsoft Intune including enrollment, compliance policies, configuration profiles, application deployment, update rings, endpoint security, and reporting

Configure Windows Autopilot and Microsoft Entra ID integration; support Conditional Access dependencies and Microsoft Defender for Endpoint integration where applicable

Configure and deploy Jamf Pro Enterprise for macOS and Apple mobile device management, including Apple Business Manager integration, Automated Device Enrollment, Apps and Books, and configuration profiles

Extract current ManageEngine configurations and map capabilities to the target-state Intune and Jamf platforms

Produce migration runbooks, configuration documentation, test plans, validation results, issue logs, rollback procedures, and operational handoff materials

Conduct knowledge-transfer sessions with client and internal personnel; communicate progress, risks, and decisions clearly in a client-facing environment

ESSENTIAL QUALIFICATIONS

5+ years of enterprise endpoint engineering or workplace technology experience

Demonstrated experience migrating endpoint devices from one enterprise management platform to another - including pilot design, wave planning, production rollout, troubleshooting, and rollback (this is a hard requirement; steady-state administration alone does not qualify)

3+ years of hands-on Microsoft Intune experience - enrollment, compliance, configuration profiles, application deployment, endpoint security, and troubleshooting

3+ years of hands-on Jamf Pro Enterprise experience for macOS and Apple mobile device management

Hands-on experience integrating Apple Business Manager with Jamf Pro, including Automated Device Enrollment and Apps and Books

Working knowledge of ManageEngine Endpoint Central, preferably in a migration context

Strong administration and troubleshooting experience across Windows 10/11, macOS, iOS, and iPadOS

Working knowledge of Microsoft Entra ID, device identity, certificates, compliance, and Conditional Access dependencies

Ability to work independently in a client-facing consulting environment and deliver implementation-quality artifacts

BONUS QUALIFICATIONS

Microsoft Certified: Endpoint Administrator Associate (MD-102)

Jamf Certified Tech, Jamf Certified Admin, or Jamf Certified Expert

Experience with Microsoft Defender for Endpoint, Jamf Connect, or Jamf Protect

PowerShell, Bash, Microsoft Graph API, or REST API automation experience

Background in professional services, consulting, managed services, or multi-client delivery environments

WHY AVERRO?

Averro is a Veteran-Owned organization dedicated to delivering innovative talent solutions, business consulting, and technology services that propel businesses and careers forward. We live by our ethos: Be Curious | Build Trust | Empower Each Other. These values show in our commitment to client satisfaction, timely support, and unmatched consultant care. Our Aim - Your Ascent.

Averro is an equal opportunity employer, and we are committed to diversity, equity, and inclusion in the workplace. All qualified applicants will receive consideration for employment, regardless of criminal histories, consistent with legal obligations. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

View our privacy policy here: https://www.averro.com/legal/privacy-policy