Senior Endpoint Engineer

Suffolk Construction•Boston, MA

About The Position

Suffolk is a national enterprise that builds, innovates, and invests. We provide value across the entire project lifecycle through our core construction management services and complementary business lines in real estate investment, design, self-perform construction, and technology start-up investment (Suffolk Technologies). By integrating data, artificial intelligence, and advanced technology through our Seamless Platform, we connect design, construction, and operations to deliver smarter, more predictable results and redefine how America builds. Suffolk – America’s Contractor – is a national company with more than $9 billion in annual revenue, 3,000 employees, and 17 offices, including Boston (headquarters), New York City, Miami, West Palm Beach, Tampa, Estero, Dallas, Los Angeles, San Francisco, San Diego, Las Vegas, Herndon, U.S. Virgin Islands, and other key markets. Suffolk manages some of the most complex and transformative projects in the country, serving clients across healthcare, life sciences, education, gaming, aviation, transportation, government, mission critical, and commercial sectors. Suffolk is privately held and is led by founder, chairman and CEO John Fish. Suffolk is ranked #8 on ENR’s list of “Top CM-at-Risk Contractors.” For more information, visit www.suffolk.com and follow Suffolk on Facebook , Twitter , LinkedIn , YouTube , and Instagram . At Suffolk, we believe that our total rewards program should offer you and your family the support you need when it matters most. That’s why we have created a program that provides employees with access to a wide variety of options that can be personalized to support you and your loved ones physically, emotionally, and financially. Benefits include, competitive salaries, auto allowances and gas cards for certain roles, access to market leading medical and emotional and mental health benefits, dental, and vision insurance plans, virtual care options for physical therapy and primary care, generous paid time off, 401k plan with employer match and access to expert financial resources, company paid and voluntary life insurance, tax deferred savings accounts, 10 backup daycare days each year, short- and long-term disability, commuter benefits and more.  For more information, click here . Suffolk Construction is seeking an experienced Endpoint Engineer to support and evolve our modern workplace environment across corporate offices, regional teams, and active construction project sites. This role is responsible for administering Microsoft Intune for both Windows and macOS endpoints, ensuring devices are secure, compliant, and reliable while supporting a highly mobile and project-driven workforce. This position involves managing endpoint hardware standards and lifecycle, planning and executing hardware refreshes, and monitoring endpoint health and compliance to resolve complex issues.

Requirements

8 + years of ex pertise managing Windows and macOS endpoints in an enterprise environment.
Hands-on experience administering Microsoft Intune / Endpoint Manager in a production environment
Strong knowledge of Windows 10/11 and m acOS administration
Experience with Azure Active Directory (Entra ID) device join, hybrid join, and identity concepts
Familiarity with endpoint security best practices in regulated or security-conscious environments
Exper tise in packaging and deploying applications across Windows and macOS
Strong troubleshooting skills with the ability to work independently in a fast-paced environment
Excellent written and verbal communication skills

Nice To Haves

Expe rtise in supporting a highly mobile and remote workforce.
PowerShell (Windows) and Bash (macOS) scripting experience
Expertise with Windows Autopilot and Apple ADE/DEP
Experience with Tanium endpoint management a plus
Strong knowledge of NIST /CIS endpoint security standards , Conditional Access, and Zero Trust principles
Microsoft certifications (MD-102, MS-102) or Apple certifications
Demonstrated experience in integrating Intune with third-party tools (MDM, IAM , security, or asset management platforms)

Responsibilities

Administer and optimize Microsoft Intune for Windows 10/11 and macOS endpoints across Suffolk’s enterprise
Design, deploy, and maintain device configuration profiles , compliance policies, and endpoint security baselines
Manage device enrollment strategies including Windows Autopilot and Apple Automated Device Enrollment (ADE/DEP)
Package, deploy, and maintain applications for corporate and field users (Win32, PKG, DMG, LOB apps)
Support secure access to Suffolk systems using Azure AD (Entra ID) device identity and Conditional Access
Partner with Information Security to implement and enforce endpoint security controls (BitLocker, FileVault , Defender, Compliance Policies )
Manage OS updates, feature releases, and patching strategies for Windows and macOS devices
Own endpoint hardware standards and lifecycle , including device specifications, model selection, and design for Windows and macOS laptops
Partner with business units, field teams, and IT stakeholders to ensure endpoint hardware aligns with role-based job requirements , performance needs, and construction-site realities
Identify opportunities to integrate AI driven capabilities into the endpoint engineering model, including device health monitoring, remediation, analytics, and operational efficiency
Lead hardware refresh planning , including evaluation, vetting, and hands-on testing of new laptop models to ensure compatibility with Intune, security controls, and applications prior to deployment
Partner with IT, Security, and Service Delivery teams to evaluate and adopt AI assisted tools and workflows that enhance endpoint reliability, compliance, and support outcomes
Monitor endpoint health, compliance, and deployment success; troubleshoot complex endpoint issues
Provide tier-3 escalation support for endpoint-related incidents and problems
Create and maintain technical documentation , standards, and SOPs for endpoint management
Participate in modernization initiatives such as Zero Trust, cloud-first device management, and endpoint automation