Endpoint Management Engineer
About The Position
Gillette Children’s is seeking an Endpoint Management Engineer to take strategic and operational ownership of its endpoint management and end-user computing environment. The role designs, administers, and continually improves platforms that support clinician and staff productivity and device security, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. The engineer also evaluates and adopts technologies to improve the end-user experience. This is an onsite position in St. Paul, Minnesota, with a Monday–Friday schedule of 8:00 a.m.–4:30 p.m., with some flexibility. After onboarding, the position participates in on-call coverage approximately every 8–10 weeks. The engineer works closely with Security, Infrastructure, Networking, Clinical Applications, service desk, and desktop support teams, and serves as the senior technical escalation point for enterprise-wide endpoint issues.
Requirements
- Bachelor’s degree in computer science, MIS, Business Administration, or Information Technology, or at least four years of equivalent experience.
- Experience with enterprise-wide information systems.
- Proficiency in implementing, supporting, and maintaining systems in an IT environment.
- Experience documenting and version-controlling system configurations, user guides, and standard operating procedures.
- Deep experience with scripting and automation.
- Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement.
- Advanced knowledge of Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
- Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
- Strong experience with endpoint configuration management, operating system imaging, application deployment, and software packaging.
- Ability to automate endpoint administration and operational processes using scripting and other automation technologies.
- Experience managing endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
- Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
- Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
- Strong understanding of change management, testing, validation, and release management practices.
- Ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
- Experience serving as a technical escalation resource and collaborating with support, infrastructure, security, and application teams.
- Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
- Strong understanding of business processes and ability to align endpoint solutions with operational needs.
- Knowledge of healthcare technology environments and applicable regulations, including HIPAA and other healthcare compliance standards.
- Excellent analytical, organizational, problem-solving, and decision-making skills.
- Excellent verbal and written communication skills, including the ability to explain technical concepts to non-technical audiences.
- Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.
Nice To Haves
- MBA or a related master’s degree.
- Previous experience working in a hospital setting.
Responsibilities
- Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned with clinical and business workflows.
- Participate in budgeting and lifecycle planning for endpoint hardware and software.
- Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods.
- Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
- Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android.
- Set application packaging standards, manage the software catalog and licensing compliance, and manage changes with testing and rollback plans.
- Own enterprise-wide endpoint incidents from beginning to end; use event logs, endpoint telemetry, Intune reporting, and operating system diagnostics to identify root causes, coordinate resolutions, and implement long-term fixes.
- Replace manual processes with scripting, automation, and self-service.
- Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
- Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.
- Collaborate with Security, Infrastructure, Networking, Clinical Applications, service desk, and desktop support teams.
Benefits
- Retirement savings match.
- Tuition and certification reimbursement.
- Paid time off.
- Health and wellness benefits for employees at 0.5 FTE and above.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
