Endpoint Management Engineer

Gillette Children's•St Paul, MN

9h•Onsite

About The Position

Gillette Children’s is seeking an Endpoint Management Engineer to take strategic and operational ownership of its endpoint management and end-user computing environment. The engineer will design, administer, and continuously improve platforms that support clinicians and staff and protect devices, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. The role will also evaluate and adopt technologies that improve the end-user experience. This is an onsite position in St. Paul, Minnesota, with a Monday–Friday schedule of 8:00 a.m.–4:30 p.m. with some flexibility. Once onboarded, the selected candidate will participate in an on-call rotation approximately every 8–10 weeks. The engineer will work closely with Security, Infrastructure, Networking, Clinical Applications, service desk, and desktop support teams, serving as the senior technical escalation point for enterprise-wide endpoint issues. Responsibilities span endpoint strategy and planning, patching and security, deployment and packaging, incident escalation and root cause analysis, automation and reporting, documentation, and audit support. The annual salary range is $92,497–$138,736, with a median salary of $115,606. Pay depends on factors including relevant work experience and internal equity. Gillette Children’s offers a competitive benefits package, including a retirement savings match, tuition and certification reimbursement, paid time off, and health and wellness benefits for employees at 0.5 FTE and above.

Requirements

A bachelor’s degree in computer science, MIS, business administration, or information technology, or at least four years of equivalent experience.
Experience with enterprise-wide information systems.
Proficiency in system implementation, support, and maintenance within an IT environment.
Experience documenting and maintaining version control for system configurations, user guides, and standard operating procedures.
Deep experience with scripting and automation.
Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement.
Advanced knowledge of endpoint management platforms and technologies, including Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
Strong experience with endpoint configuration management, operating-system imaging, application deployment, and software packaging.
Demonstrated ability to automate endpoint administration and operational processes using scripting and other automation technologies.
Experience managing endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
Strong understanding of change management, testing, validation, and release management practices.
Ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
Experience serving as a technical escalation resource and collaborating effectively with support, infrastructure, security, and application teams.
Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
Strong understanding of business processes and the ability to align endpoint solutions with operational needs.
Knowledge of healthcare technology environments and applicable regulations, including HIPAA and other healthcare compliance standards.
Excellent analytical, organizational, problem-solving, and decision-making skills.
Excellent verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.

Nice To Haves

MBA or related master’s degree.
Previous experience working in a hospital setting.

Responsibilities

Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned with clinical and business workflows.
Participate in budgeting and lifecycle planning for endpoint hardware and software.
Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods.
Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android.
Set packaging standards, manage the software catalog and licensing compliance, and run changes through change management with testing and rollback planning.
Own enterprise-wide endpoint incidents from start to finish; use event logs, endpoint telemetry, Intune reporting, and operating-system diagnostics to identify root causes, coordinate resolution across IT teams, and implement long-term fixes.
Replace manual processes with scripting, automation, and self-service.
Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.
Serve as the senior technical escalation point for enterprise-wide endpoint issues and collaborate with support, infrastructure, security, networking, and application teams.
Evaluate and adopt technologies that improve the end-user experience.