Windows Endpoint Engineer (L3)

Job Overview

Milestone Technologies, Inc. is seeking a Windows Endpoint Engineer (L3) to provide advanced engineering support for Windows device management, configuration, and security across the enterprise. This role is responsible for designing, implementing, and maintaining Windows endpoint configurations using Microsoft Intune, ensuring secure, compliant, and reliable device operations.

Our goal is to deliver excellent technical solutions with high-quality engineering standards, strong documentation, and operational excellence. Candidates must be highly skilled in Windows endpoint management, passionate about modern device management, and capable of thriving in a fast-paced and dynamic environment.

Job Title: Windows Endpoint Engineer (L3)

Full-time

How you will make an impact

• Manage Windows device enrollment, configuration profiles, and compliance policies in Microsoft Intune.
• Deploy and maintain Win32, MSI, and MSIX applications through Intune, including packaging, testing, and staged rollouts.
• Configure and maintain Windows Autopilot for zero-touch provisioning and streamlined onboarding.
• Implement, validate, and maintain CIS Windows Benchmark and security baseline configurations.
• Troubleshoot and remediate compliance policy violations and configuration drift.
• Manage Windows OS lifecycle including feature updates, quality updates, and Windows 11 migration projects.
• Troubleshoot advanced Windows OS issues including driver conflicts, performance issues, and system instability.
• Migrate legacy Group Policy Objects (GPOs) to modern Intune configuration profiles and troubleshoot policy conflicts.
• Create technical documentation, runbooks, engineering standards, and configuration guides.
• Share knowledge with cross-functional teams and support elevating technical capability across the organization.

What you will need to succeed

• Strong experience managing and engineering Windows endpoints in a large-scale enterprise environment.
• Advanced hands-on experience with Microsoft Intune MDM/MAM, Windows Autopilot, configuration profiles, and compliance policies.
• Ability to package and deploy Win32 applications, including scripting and troubleshooting installation issues.
• Deep understanding of Windows OS internals, registry, device drivers, and security configurations.
• Experience implementing CIS Benchmarks, Windows security baselines, and compliance frameworks.
• Ability to analyze and resolve complex OS, application, and configuration issues with minimal supervision.
• Excellent ability to communicate technical concepts clearly to both technical and non-technical teams.
• Strong documentation, process adherence, and continuous improvement mindset.
• Demonstrated ability to work across teams and manage multiple engineering tasks simultaneously.

Preferred Qualifications

• 5-7 years of experience in Windows engineering, endpoint management, or enterprise device operations.
• Microsoft certifications such as MD-102, MS-102, or equivalent experience.
• Strong PowerShell scripting and automation skills.
• Experience migrating from GPO to Intune or modern management architectures.
• Familiarity with Windows Update for Business (WUfB), update rings, and OS servicing.
• Experience collaborating with security teams on compliance, baselines, and hardening initiatives.
• Knowledge of networking fundamentals (TCP/IP, DNS, DHCP) that impact endpoint connectivity and configuration.

Technologies You Will Work With

• Microsoft Intune / Endpoint Manager
• Windows Autopilot
• Win32 app packaging (Intune package format, PowerShell, detection rules)
• CIS Benchmarks & Security Baselines
• Windows OS (10/11), drivers, and performance tooling
• PowerShell automation & scripting
• Group Policy (GPO) & Configuration Service Providers (CSPs)
• Windows Update for Business (WUfB)
• Azure AD / Entra ID (device and identity management)