Senior Endpoint Engineer

Serve as senior technical owner and escalation point for Trilon’s workplace endpoint ecosystem across Windows, Apple devices, Microsoft Teams Rooms, and copier/plotter fleets. Lead endpoint platform architecture, modernization, design review, technical direction, standards, documentation, change control, testing, rollback, and roadmap development. Define and maintain Windows endpoint configuration profiles, security baselines, compliance policies, assignment groups, role-based access, and policy exceptions. Own Microsoft Intune and Windows Autopilot architecture, enrollment, deployment, pre-provisioning, reset, redeployment, and zero-touch workflows. Design Microsoft Entra join, hybrid join, automatic MDM enrollment, and legacy-device transition patterns. Own Mac, iPhone, and iPad management through Microsoft Intune and Apple Business Manager. Manage application packaging and delivery through Intune, including Win32 packages, PSADT, detection rules, dependencies, supersedence, testing, assignments, remediation, and retirement. Manage Patch My PC, Windows Autopatch, update rings, PowerShell, Microsoft Graph, proactive remediation, APIs, and governed AI-assisted automation. Develop delivery patterns for large AEC applications such as Autodesk AutoCAD and Bentley products. Partner with Cybersecurity on Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, endpoint security, and vulnerability remediation. Build dashboards and reports covering enrollment, compliance, encryption, patch posture, deployment success, device health, exceptions, and remediation. Maintain endpoint inventory across identity, device-management, service-management, procurement, remote-support, and vendor systems. Govern endpoint lifecycle, hardware standards, warranties, leasing, refresh, recovery, reuse, retirement, and secure disposition. Own architecture, standards, lifecycle, monitoring, documentation, and vendor coordination for Microsoft Teams Rooms. Govern Trilon’s copier and plotter fleet, including standards, contracts, secure configuration, firmware, inventory, metrics, and replacement strategy. Lead endpoint discovery, assessment, planning, and migration for newly acquired firms. Partner with Service Delivery and Field Support on onboarding, offboarding, office openings, relocations, refresh events, and complex escalations. Communicate technical risks, decisions, progress, and exceptions to IT leadership and business stakeholders. Requirements7 or more years of endpoint management, systems engineering, or modern workplace experience, including hands‑on responsibility for managing thousands of endpoints through Microsoft Intune and Windows Autopilot in a distributed enterprise environment. Demonstrated technical leadership, sound judgment, and ability to influence technical peers, establish standards, coordinate across teams, and communicate clearly without formal reporting authority. Expert‑level hands‑on experience with Microsoft Intune, Windows Autopilot, Microsoft Entra ID device management, Windows 11, and endpoint policy architecture. Strong experience with enterprise software packaging and delivery, including Win32 applications, detection logic, dependencies, deployment rings, and troubleshooting failed installations; PSADT experience strongly preferred. Experience with Windows Autopatch or equivalent update‑ring governance and third‑party application and patch automation; Patch My PC experience strongly preferred. Advanced PowerShell skills and practical experience using Microsoft Graph or other APIs. Strong understanding of Microsoft Defender for Endpoint, BitLocker, Windows LAPS, Conditional Access, compliance, least privilege, and vulnerability remediation. Experience supporting complex distributed environments and endpoint operations during mergers, acquisitions, or tenant/domain transitions. Ability to reconcile data across device‑management, identity, asset, remote‑support, and service‑management systems; experience with hardware lifecycle, leasing, vendor coordination, asset governance, and secure retirement. Strong hands‑on experience managing Mac, iPhone, and iPad through Microsoft Intune and Apple Business Manager. Experience engineering or governing Microsoft Teams Rooms strongly preferred. Experience governing an enterprise copier, printer, or plotter fleet preferred. Experience with endpoint equipment warehousing and depot operations preferred. Experience packaging and deploying complex AEC applications, particularly Autodesk AutoCAD and Bentley products, preferred.