Sr. Endpoint Management Engineer

Location: Denver, CO (hybrid 3 days onsite)

Pay: $55 - $62/hr (Compensation can vary depending on experience)

General Overview: We are seeking an Endpoint Management Engineer to help support and evolve a large enterprise desktop environment. This individual will play a key role in maintaining reliable, secure, and standardized endpoint services while contributing to automation, software development, patching, device lifecycle management, and ongoing workplace technology initiatives. The ideal candidate will be someone with deep hands-on experience in the Microsoft endpoint ecosystem who can operate effectively in a complex enterprise environment. This person should be comfortable troubleshooting difficult technical issues independently, improving existing processes, and working closely with infrastructure, security, and IT teams.

Responsibilities: Engineer, administer, and maintain enterprise Windows desktop and laptop environments. Manage devices throughout their lifecycle, including provisioning, deployment, configuration, upgrades, refreshes, and retirement. Administer and optimize endpoint management technologies including Microsoft Intune, Conjuration Manager (SCCM), Windows Autopilot, and Microsoft Entra ID. Package, test, and distribute applications and software across enterprise environments. Create and maintain Power Shell scripts and automation to improve deployment, remediation, and administrative processes. Coordinate endpoint patching activities and support vulnerability remediation and compliance initiatives. Develop and maintain operational reporting related to endpoing health, compliance, software deployment, and management activities. Act as a senior escalation point for complex endpoint issues, including troubleshooting, root cause investigation, and resolution of Tier 3 incidents. Partner with cybersecurity teams to identify and address endpoint security risks and strengthen device compliance. Support initiatives designed to modernize endpoint management and transition legacy processes toward cloud-based solutions. Work across IT teams, third-party providers, and business groups to deliver dependable and secure workplace technology services. Participate in onsite support or travel to regional locations when necessary, with travel expected to be up to approximately 25%.

Requirements: Bachelor's degree in Information Technology, Computer Science, Engineering, Business, or a related field, or equivalent professional experience. Significant hands-on experience supporting Microsoft Configuration Manager (SCCM) with a large or complex organization. Strong working knowledge of Microsoft Intune, Active Directory and Group Policy. Demonstrated experience managing Windows 10/11 deployments, upgrades, imaging, and device lifecycle activities. Experience with enterprise application deployment, packaging, patching, and vulnerability remediation. Strong Power Shell capabilities, including the ability to automate repetitive administration and remediation tasks. Understanding of endpoint compliance, operational controls, reporting, and governance. Solid knowledge of endpoint security principles and secure configuration practices. Strong troubleshooting and analytical skills with the ability to work through complex technical problems independently.