AI-Ready Endpoint & MDM Engineer

V2X•UNAVAILABLE, UNAVAILABLE

9d•Remote

About The Position

The AI-Ready Endpoint & MDM Engineer is a technical role responsible for the evaluation, operation, maintenance, security, and evolution of the global endpoint environment. Reporting to the Director of AI-Ready Endpoint Infrastructure & Security, this engineer will utilize agentic AI and modern configuration management to automate the administration of the company’s unified endpoint ecosystem. This role provides engineering and development across multiple Mobile Device Management (MDM) platforms (Intune, Jamf, Google MDM, Automox) and cloud workspace solutions, including Microsoft Azure Virtual Desktop (AVD) managed via Nerdio. The engineer ensures all endpoints are hardened, compliant, and continuously prepared to serve as secure platforms for both human users and AI workloads, while applying FinOps principles to optimize cloud performance and financial efficiency.

Requirements

Bachelor’s Degree in IT, Computer Science, or a related field or an equivalent combination of education and experience from which comparable knowledge and job skills can be obtained. (One year related experience may be substituted for one year of education, if degree is required)
Minimum of 4 to 6 years of related IT experience, with at least 3 years focused specifically on endpoint systems administration, MDM platform management, and cloud virtualization.
U.S. Citizenship required.
Hands-on administrative expertise across multiple UEM/MDM platforms, specifically Microsoft Intune, Jamf, Google MDM, and Automox.
Deep proficiency in cross-platform operating system management, including Windows 11, macOS, ChromeOS, Windows Server, RHEL, iOS, and Android.
Expertise in designing and managing Azure Virtual Desktop (AVD) environments optimized for multiple personas and workloads.
Strong understanding of cloud FinOps principles and hands-on experience using Nerdio Manager for Enterprise for automated scaling, cost optimization, and dynamic resource provisioning.
Familiarity with extending configuration management and Zero Trust device posture checks to monitor and govern AI agents running on endpoints.
Proficiency in scripting languages (PowerShell, Bash, Python) and utilizing APIs to integrate platforms.

Responsibilities

Architect, deploy, and manage Microsoft Azure Virtual Desktop (AVD) environments purpose-built to support multiple user personas, tailoring compute, storage, and application delivery to distinct organizational roles and workload requirements.
Utilize Nerdio Manager for Enterprise to centrally manage AVD deployments, automate image staging, and streamline the provisioning of Windows cloud desktops and remote applications.
Maintain operating efficiency and stability for remote desktop services and Azure VDI Desktops, ensuring secure, high-performance remote access.
Implement FinOps best practices by leveraging Nerdio's advanced auto-scaling capabilities to dynamically adjust active session host VMs based on real-time user demand, significantly reducing monthly Azure compute and storage costs.
Balance infrastructure cost optimization with a seamless user experience by configuring hybrid auto-scaling strategies that combine proactive schedule-based scaling (pre-warming capacity) with reactive performance-based scaling (CPU/memory triggers).
Optimize storage expenditures by automating OS disk downgrades for non-persistent machines during idle periods and utilizing "Start on Connect" logic for personal 1:1 assigned desktops.
Develop, deploy, and maintain management software and systems across a diverse global fleet of endpoints, including Windows 11 PCs, MacBooks, Chromebooks, Windows Servers, RHEL servers, Android, and iOS devices.
Configure and optimize enterprise MDM platforms (Microsoft Intune, Jamf, Google MDM, and Automox) to enforce configuration baselines and compliance policies.
Manage Operating System Deployment (OSD) task sequences, OS images, and automated software packaging pipelines for complex, multi-platform environments.
Leverage agentic AI workflows to automate device lifecycle management, from zero-touch provisioning and onboarding to offboarding and secure decommission.
Integrate intelligent agents to monitor endpoint health, interpret compliance data, and execute self-healing remediations autonomously across the MDM infrastructure.
Manage the testing and deployment of third-party patching, as well as workstation and server security, feature, and quality updates across all operating systems.
Gather information and implement policies required for legal and regulatory compliance, such as CMMC Level 2 and NIST 800-171 controls.
Prioritize and respond to requests for service, providing Tier 3 escalation support and guidance to global endpoint support staff in remote locations.