Senior Microsoft Endpoint Management Engineer

The Senior Microsoft Endpoint Management Engineer is responsible for designing, implementing, maintaining, and supporting enterprise endpoint management solutions using both Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune.

This role serves as a subject matter expert for traditional and modern endpoint management, including operating system deployment, application lifecycle management, device compliance, security controls, endpoint analytics, and cloud-based device management.

The ideal candidate possesses deep expertise in both MECM and Intune and can help organizations modernize endpoint management through co-management, Microsoft Entra ID integration, Windows Autopilot, and cloud-native management strategies.

Key Responsibilities
Microsoft Endpoint Configuration Manager (MECM / SCCM)

• Design, implement, administer, and maintain MECM infrastructure, including site systems, boundaries, boundary groups, distribution points, and client settings.
• Monitor MECM health, performance, and availability; perform upgrades, hotfix installations, and environment maintenance.
• Design and maintain Windows 10/11 operating system deployment task sequences for bare-metal, refresh, and in-place upgrade scenarios.
• Manage boot images, driver repositories, deployment media, and PXE/task sequence troubleshooting.
• Package, test, deploy, and maintain enterprise applications using MSI, EXE, PowerShell, scripts, and establish detection methods, dependencies, supersedence, and deployment requirements.
• Manage Windows and third-party patching solutions, including deployment rings, maintenance windows, compliance monitoring, and remediation.

Microsoft Intune / Cloud Endpoint Management

• Design, implement, and administer Microsoft Intune environments for Windows, macOS, iOS, and Android device management.
• Configure device enrollment, Microsoft Entra ID join, hybrid join, compliance policies, configuration profiles, device restrictions, and endpoint security policies.
• Design and implement Windows Autopilot scenarios, including user-driven, pre-provisioned, and self-deploying deployments.
• Configure Enrollment Status Page behavior, Autopilot profile assignments, and troubleshoot enrollment and provisioning issues.
• Package and deploy Win32, Microsoft Store, Microsoft 365 Apps, and line-of-business applications; manage application lifecycle and update processes.
• Configure and maintain security baselines, BitLocker management, Endpoint Privilege Management, Microsoft Defender integration, and Conditional Access integration.

Co-Management & Endpoint Modernization

• Design and implement MECM/Intune co-management solutions and migrate workloads between MECM and Intune.
• Develop endpoint modernization roadmaps that guide customers from traditional device management to cloud-native management.
• Assess customer endpoint environments and recommend best-practice architectures for modern management, compliance, and security.
• Lead technical workshops, design sessions, implementation efforts, and customer-facing endpoint management projects.

Automation, Documentation & Reporting

• Develop PowerShell scripts for endpoint automation, administration, reporting, and remediation.
• Integrate endpoint management workflows with Microsoft Graph API where applicable.
• Create and maintain technical documentation, SOPs, runbooks, architecture diagrams, and implementation guides.
• Develop reports using MECM, Intune, Power BI, SQL, and Microsoft reporting tools to track deployment success, compliance, and endpoint metrics.
• Provide Tier 3 escalation support and mentor junior engineers or support staff.

Required Qualifications

• 5+ years of hands-on experience administering MECM/SCCM in enterprise environments.
• 5+ years of hands-on experience administering Microsoft Intune.
• Strong experience with Windows 10 and Windows 11 deployment, management, and troubleshooting.
• Experience with operating system deployment, application packaging/deployment, patch management, endpoint security, and device compliance.
• Strong understanding of Microsoft Entra ID, Active Directory, Group Policy, DNS, DHCP, and PKI/certificates.
• Advanced PowerShell scripting and automation experience.
• Experience implementing MECM and Intune co-management.
• Strong troubleshooting, communication, documentation, and customer-facing consulting skills.

Preferred Qualifications

• Experience with Microsoft Defender for Endpoint, Defender XDR, Microsoft Cloud PKI, Endpoint Privilege Management, and Microsoft security baselines.
• Experience with Microsoft Graph API, Power BI reporting, tenant-to-tenant migrations, endpoint modernization projects, and third-party patching solutions.
• Experience supporting SMB, education, healthcare, government, or enterprise organizations.
• Ability to lead discovery sessions, translate technical needs into project scopes, and present recommendations to customers and internal stakeholders.

Preferred Certifications
Strongly Preferred
MD-102: Endpoint Administrator Associate
MS-102: Microsoft 365 Administrator Expert
Additional
SC-300: Identity and Access Administrator
AZ-104: Azure Administrator Associate
 
Ideal Candidate
The ideal candidate has extensive experience managing both MECM and Intune environments and understands how to bridge traditional endpoint management with modern cloud-based management. They can independently lead customer implementations, support large-scale device deployments, automate administrative processes, and provide strategic guidance around endpoint modernization and endpoint security.
This is a senior technical position requiring strong consulting skills, customer engagement experience, and the ability to lead endpoint management projects from design through implementation and support.