Farmers and Merchants Bank of Long Beach-posted 28 days ago
Full-time • Mid Level
Seal Beach, CA
501-1,000 employees

THE ENDPOINT AUTOMATION ENGINEER 2 DESIGNS, IMPLEMENTS, AND MANAGES AUTOMATED SOLUTIONS FOR USER ENDPOINTS—INCLUDING DESKTOPS, LAPTOPS, MOBILE DEVICES, AND PERIPHERALS—ACROSS ON-PREMISES AND CLOUD ENVIRONMENTS. THIS POSITION FOCUSES ON STREAMLINING SOFTWARE DEPLOYMENT, PATCH MANAGEMENT, CONFIGURATION, AND SYSTEM MAINTENANCE TO ENSURE SECURE, EFFICIENT, AND RELIABLE ENDPOINT OPERATIONS WITH MINIMAL USER DISRUPTION. LEVERAGING TOOLS SUCH AS MICROSOFT INTUNE, TANIUM, SERVICENOW, AND OPEN-SOURCE WORKFLOW AUTOMATION PLATFORMS (ALONG WITH POWERSHELL AND PYTHON SCRIPTING), THIS POSITION AUTOMATES ENDPOINT MANAGEMENT AND VULNERABILITY REMEDIATION. THE ENDPOINT AUTOMATION ENGINEER 2 COLLABORATES CLOSELY WITH ITS AND SECURITY TEAMS TO ENHANCE COMPLIANCE, STRENGTHEN THE ORGANIZATION’S SECURITY POSTURE, AND DRIVE OPERATIONAL EFFICIENCY THROUGH SCALABLE, AUTOMATED SOLUTIONS.

  • Develop, maintain, and optimize automation scripts using PowerShell, Python, or other scripting languages to streamline software deployment, workstation imaging, configuration, and repetitive administrative tasks.
  • Design and develop innovative open-source workflow automation systems to connect, optimize, and automate processes across multiple platforms and services.
  • Design and maintain automated workflows for device provisioning, patch management, system configuration and day-to-day tasks across Service Desk environment.
  • Utilize endpoint management tools (e.g., Intune, Tanium) and automation frameworks to enhance operational efficiency, consistency, and compliance.
  • Integrate ServiceNow with endpoint management platforms to enable unified automation, reporting, and incident response
  • Monitor automated processes for failures, perform root cause analysis, and implement corrective actions to ensure reliability.
  • Monitor and maintain assigned support tickets daily, ensuring adherence to SLAs for response, escalation, and resolution based on severity and priority.
  • Provide advanced technical support to the Service Desk for endpoint-related issues beyond Service Desk Tech capabilities.
  • Manage the full lifecycle of Windows endpoints—including provisioning, configuration, maintenance, upgrades, and de-provisioning.
  • Administer and troubleshoot enterprise platforms such as Active Directory (on-prem and Entra ID), Group Policy, Windows Enterprise, Microsoft 365, and Intune from an endpoint perspective.
  • Configure, maintain, and update system images and baseline configurations in alignment with IT policies and management directives.
  • Responsible of high-priority (“Zero-Day”) vulnerabilities and security patches across Windows and third-party applications.
  • Ensure adherence to departmental Standard Operating Procedures, checklists, and standardization practices.
  • Analyze endpoint infrastructure performance, scalability, and redundancy; produce reports and benchmarks to guide optimization efforts.
  • Develop and maintain technical documentation, scripts, and configuration standards to support consistency and knowledge sharing.
  • Maintain hardware and software efficiency through continuous monitoring, upgrades, and lifecycle management.
  • Assist in building and maintaining a Generative AI–powered knowledge base that serves as a user self-help and IT support portal.
  • Work closely with vendors and internal stakeholders to coordinate deployments, resolve escalations, and support bank-wide IT projects.
  • Provide technical training and mentorship to IT team members and bank associates.
  • Participate in on-call rotation to provide after-hours support and ensure endpoint stability and security.
  • Complies with all State and Federal Banking regulatory requirements, including but not limited to: BSA, Anti-Money Laundering OFAC, CIP, Financial Elder Abuse Reporting, Sexual Harassment, Information Security and privacy requirements.
  • This position will elevate suspicious activity to supervisory staff and/or BSA department.
  • Completes compliance and other technical training workshops as assigned.
  • Strong proficiency in PowerShell, Python, Regex, JSON / XML Parsing and workflow automation tools.
  • Working knowledge of automation frameworks and experience integrating solutions across hybrid cloud environments (Azure, AWS, on-premises).
  • Hands-on experience with EMP, EMSP, UEM, MDM (e.g., Intune & Tanium), Active Directory, and Azure in hybrid environments.
  • Strong expertise in endpoint security, vulnerability assessment, and compliance management aligned with Windows Enterprise standards and best practices.
  • Excellent analytical, communication, and collaboration skills across technical and non-technical teams.
  • Minimum of 10 years of experience in Service Desk Support and Systems Administration with desktop and server support in a business environment
  • Minimum of 10 years of experience deploying configuration policies with Active Directory (GPO's, security groups, Windows firewall settings, etc.), Microsoft Intune, and MDM products
  • Expert level proficiency with Microsoft Windows products (10+ years)
  • Requires high-level proficiency automating system administration using Microsoft PowerShell
  • Extensive hands on experience with supporting and automating the distribution and configuration of Windows PC applications and mobile apps to Apple devices
  • Extensive experience with a major Endpoint Management Platforms (KACE, SCCM, Big Fix, Tanium, etc.)
  • Experience with deploying applications and client configurations using major virtual desktop platforms: VMware View, Citrix, Microsoft RDS
  • Senior level experience with Application support, security, and technical documentation
  • Experience support Cloud-based SAAS solutions, such as Microsoft M365, Azure VDI
  • 5+ years of experience in ITIL Framework required.
  • Candidates holding the following industry standard certifications are preferred: Microsoft Solutions Associates ITIL Foundation, MCP, Azure Professional, Security+, VMware, Service Now
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service