Endpoint Management Engineer

Moog Inc. • Aurora, IL

4d • $120,000 - $150,000 • Hybrid

About The Position

The Endpoint Management Engineer designs, implements, and supports modern endpoint management solutions across Microsoft GCC-High and Commercial Microsoft 365 tenants. The role is a technical expert in Microsoft Intune, Configuration Manager (SCCM), Windows device management, application deployment, compliance, and endpoint security.

The position focuses on engineering scalable, secure, and efficient endpoint management solutions that improve the end-user experience while meeting regulatory, security, and operational requirements. It contributes to the organization’s cloud transformation strategy by advancing modern management capabilities while maintaining and optimizing existing SCCM infrastructure. The role is hybrid and based out of Moog’s East Aurora, NY offices, and requires access to U.S. export-controlled information.

Requirements

• At least 5 years of experience administering Microsoft Intune in an enterprise environment.
• At least 5 years of experience supporting Microsoft SCCM / Configuration Manager.
• Experience managing Windows endpoints at scale.
• Experience with operating system deployment, application packaging, and software distribution.
• Strong understanding of endpoint security, compliance policies, and device management best practices.
• Experience with PowerShell scripting and automation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.

Nice To Haves

• Experience managing Microsoft Intune within GCC-High environments.
• Experience with Windows Autopilot and Windows Update for Business.
• Knowledge of Microsoft Entra ID, Conditional Access, and Zero Trust principles.
• Experience supporting co-management and workload transitions between SCCM and Intune.
• Experience with Power BI or reporting platforms.
• Familiarity with ServiceNow and ITIL processes.
• Microsoft Certified Endpoint Administrator Associate certification or equivalent.

Responsibilities

• Design, deploy, and maintain endpoint management solutions using Microsoft Intune in GCC-High and Commercial environments.
• Administer and support SCCM infrastructure, including software distribution, operating system deployment, compliance reporting, and patch management.
• Develop and manage configuration profiles, compliance policies, endpoint security policies, and application deployment strategies.
• Support migration of management workloads from SCCM to Intune while maintaining business continuity.
• Implement and support Windows Autopilot, Windows Update for Business, and modern device provisioning processes.
• Evaluate, test, and deploy new endpoint management technologies and capabilities.
• Develop endpoint management solutions aligned with GCC-High security and compliance requirements.
• Partner with cybersecurity teams on secure configurations, endpoint hardening standards, and compliance controls.
• Support Conditional Access, device compliance, BitLocker, credential protection, and endpoint security initiatives.
• Assist with audit readiness and documentation for regulated environments.
• Manage enterprise application deployment, packaging, testing, and lifecycle management.
• Support Windows operating system deployment, upgrades, and feature updates.
• Develop strategies for driver management, hardware lifecycle support, and endpoint standardization.
• Maintain deployment rings, pilot programs, and production rollout strategies for operating system and application updates.
• Use PowerShell and other automation technologies to improve operational efficiency.
• Develop automation for device provisioning, software deployment, compliance monitoring, and reporting.
• Identify opportunities to reduce manual processes and improve service delivery through automation.
• Create dashboards, reporting, and monitoring solutions that provide visibility into endpoint health and compliance.
• Develop and maintain technical documentation, engineering standards, operational procedures, and deployment runbooks.
• Create support documentation and knowledge articles for Service Desk and Site Support teams.
• Establish repeatable operational processes for consistent support across global locations.
• Conduct knowledge transfer sessions and provide technical guidance to support teams.
• Serve as a senior escalation point for complex Intune, SCCM, Autopilot, and endpoint management issues.
• Perform root cause analysis for recurring endpoint management challenges.
• Collaborate with Infrastructure, Security, Networking, Service Desk, and Desktop Support teams to resolve issues.
• Proactively monitor endpoint health, compliance, and deployment success to improve reliability and user satisfaction.

Benefits

• Great compensation package and bonus opportunities.
• Matching 401(k).
• Ability to participate in an Employee Stock Purchase Plan at select locations.
• Flexible Spending and Health Savings Accounts.
• Flexible paid time off and holidays.
• Parental leave program.
• Comprehensive medical, dental, vision, life, and disability insurance coverage.
• Employee Assistance Plan and other supplemental benefit coverages.
• Tuition assistance.
• Mentorship and coaching opportunities.
• Leadership development and other personal growth programs.
• Employee Resource Groups.
• Open paid time off policy, as noted in the salary range disclaimer.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed