Endpoint Engineer

This role is a senior, hands-on endpoint engineering position responsible for owning endpoint platforms, inventory accuracy, and endpoint risk management across the organization. Although the role reports into the Help Desk & End User Support Manager, it operates at a senior engineering and platform-ownership level, defining standards, leading modernization efforts, and reducing operational and security risk. This role will own endpoint inventory accuracy and lifecycle management across ServiceNow CMDB, Microsoft Intune, and KACE.

Schedule: On-Site Monday - Friday, 8:00 AM - 4:30 PM

Requirements:
5+ years of experience in endpoint/desktop engineering
Hands-on experience with Microsoft Intune / Endpoint Manager
Strong experience with ServiceNow CMDB (population, reconciliation, lifecycle workflows)
Experience supporting Windows 10/11 enterprise environments

Plusses:
Experience with KACE
Experience with Absolute (device visibility/recovery)
Experience with Armis (device discovery & risk insight)
Exposure to macOS and iOS/iPadOS management
Experience in healthcare or regulated environments

Key Responsibilities:
Endpoint Inventory & CMDB Management
Own endpoint inventory accuracy across ServiceNow CMDB, Intune, and KACE
Define authoritative data sources and reconcile discrepancies between systems
Design and maintain automated CMDB population and lifecycle workflows
Ensure accurate tracking of device ownership, status, and compliance
Partner with Asset Management, Security, and Support teams for audit readiness
Endpoint Engineering, Standards & Risk Management
Act as technical authority for endpoint configuration and standards
Build and maintain gold images (traditional + modern cloud-based)
Establish and enforce endpoint security baselines
Proactively manage risk (vulnerabilities, configuration drift, unsupported devices)
Endpoint Platform Ownership (KACE → Intune Migration)
Serve as platform owner for KACE (current) and Intune (future)
Develop and execute migration strategy from KACE to Intune
Migrate policies, applications, and patching with minimal disruption
Drive consolidation and establish Intune as the primary platform
Patch Management & Compliance
Own patching strategy for Windows, macOS, and third-party applications
Define SLAs based on risk and business/clinical impact
Automate patch deployment and compliance reporting
Partner with Security on vulnerability remediation and audits
Modern Endpoint Strategy & Continuous Improvement
Evaluate modern tools (e.g., Autopilot, cloud-based imaging)
Identify automation opportunities to improve deployment efficiency
Provide mentorship and escalation support to End User Support teams
Show more Show less