Endpoint Management Engineer

Moog • Buffalo, NY

2d • Hybrid

About The Position

The Endpoint Management Engineer designs, implements, and supports modern endpoint management solutions across Microsoft GCC-High and Commercial Microsoft 365 tenants. The role serves as a technical expert in Microsoft Intune, Configuration Manager (SCCM), Windows device management, application deployment, compliance, and endpoint security. Its primary focus is engineering scalable, secure, and efficient solutions that improve the end-user experience while meeting regulatory, security, and operational requirements. The engineer advances the organization’s cloud transformation and modern management capabilities while maintaining and optimizing existing SCCM infrastructure. This is a hybrid position based out of the East Aurora, New York offices and requires access to U.S. export-controlled information.

The engineer designs and maintains Intune and SCCM solutions; supports migration of workloads from SCCM to Intune; develops device configuration, compliance, security, and application deployment strategies; and implements modern provisioning and update processes. The role also supports security compliance, application and device lifecycles, automation, reporting, documentation, knowledge sharing, and complex endpoint troubleshooting in collaboration with cybersecurity, infrastructure, networking, service desk, and desktop support teams.

Requirements

• At least 5 years of experience administering Microsoft Intune in an enterprise environment.
• At least 5 years of experience supporting Microsoft SCCM / Configuration Manager.
• Experience managing Windows endpoints at scale.
• Experience with operating system deployment, application packaging, and software distribution.
• Strong understanding of endpoint security, compliance policies, and device management best practices.
• Experience with PowerShell scripting and automation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.

Nice To Haves

• Experience managing Microsoft Intune in GCC-High environments.
• Experience with Windows Autopilot and Windows Update for Business.
• Knowledge of Microsoft Entra ID, Conditional Access, and Zero Trust principles.
• Experience supporting co-management and workload transitions between SCCM and Intune.
• Experience with Power BI or reporting platforms.
• Familiarity with ServiceNow and ITIL processes.
• Microsoft Certified Endpoint Administrator Associate certification or equivalent.

Responsibilities

• Design, deploy, and maintain Microsoft Intune endpoint management solutions in GCC-High and Commercial environments.
• Administer and support SCCM infrastructure, including software distribution, operating system deployment, compliance reporting, and patch management.
• Develop and manage configuration profiles, compliance policies, endpoint security policies, and application deployment strategies.
• Support migration of management workloads from SCCM to Intune while maintaining business continuity.
• Implement and support Windows Autopilot, Windows Update for Business, and modern device provisioning processes.
• Evaluate, test, and deploy endpoint management technologies and capabilities.
• Develop endpoint solutions aligned with GCC-High security and compliance requirements.
• Partner with cybersecurity teams on secure configurations, endpoint hardening, and compliance controls.
• Support Conditional Access, device compliance, BitLocker, credential protection, and endpoint security initiatives.
• Assist with audit readiness and documentation for regulated environments.
• Manage enterprise application deployment, packaging, testing, and lifecycle management.
• Support Windows operating system deployment, upgrades, and feature updates.
• Develop strategies for driver management, hardware lifecycle support, and endpoint standardization.
• Maintain deployment rings, pilot programs, and production rollout strategies for operating system and application updates.
• Use PowerShell and other automation technologies to improve operational efficiency.
• Develop automation for device provisioning, software deployment, compliance monitoring, and reporting.
• Identify opportunities to reduce manual processes and improve service delivery through automation.
• Create dashboards, reporting, and monitoring solutions for endpoint health and compliance visibility.
• Develop and maintain technical documentation, engineering standards, operational procedures, and deployment runbooks.
• Create support documentation and knowledge articles for Service Desk and Site Support teams.
• Establish repeatable operational processes for consistent support across global locations.
• Conduct knowledge transfer sessions and provide technical guidance to support teams.
• Serve as a senior escalation point for complex Intune, SCCM, Autopilot, and endpoint management issues.
• Perform root cause analysis for recurring endpoint management challenges.
• Collaborate with Infrastructure, Security, Networking, Service Desk, and Desktop Support teams to resolve issues.
• Proactively monitor endpoint health, compliance, and deployment success to improve reliability and user satisfaction.

Benefits

• Compensation package and bonus opportunities.
• Matching 401(k).
• Employee Stock Purchase Plan at select locations.
• Flexible Spending and Health Savings Accounts.
• Flexible paid time off and holidays.
• Parental leave program.
• Medical, dental, vision, life, and disability insurance.
• Employee Assistance Plan and other supplemental benefit coverage.
• Tuition assistance.
• Mentorship and coaching opportunities.
• Leadership development and personal growth programs.
• Employee Resource Groups.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed