LTG - Sr Systems Engineer

Lennar•Waterford, FL

2d•Onsite

About The Position

The Senior Endpoint Engineer leads the planning, implementation, administration, and support of enterprise endpoint management systems and virtual desktop infrastructure (VDI) for more than 12,000 geographically distributed devices across Windows, macOS, iOS, Android, and other platforms. This role serves as a technical leader, mentor, and subject matter expert, ensuring secure, well-managed, and high-performing endpoints throughout the enterprise. The position administers Microsoft Intune and VDI environments; develops endpoint security standards; oversees patching, application deployment, and automation; monitors device health and compliance; and supports corporate and BYOD device programs. It also administers endpoint-focused identity and access controls, contributes to device provisioning and deprovisioning workflows, and partners with cross-functional teams on scalable endpoint solutions and strategic initiatives. The role includes mentoring engineers, evaluating emerging technologies, maintaining technical documentation, and handling high-priority escalations. Regular in-person attendance at a Lennar office during regular work hours is an essential function. The role is primarily sedentary and may require some travel for conferences and vendor engagements.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field.
At least 7 years of experience in systems engineering, enterprise environments, and endpoint platform administration.
Demonstrated experience with Microsoft Intune/Microsoft Endpoint Manager for MDM/MAM, including enrollment, compliance policies, configuration profiles, and app deployment across Windows, macOS, iOS, and Android.
Hands-on experience with VDI platforms such as Azure Virtual Desktop, Citrix Virtual Apps and Desktops, or VMware Horizon, including image management, session hosting, and user profile optimization.
At least 3 years of scripting and automation experience using PowerShell, Python, or similar languages, including endpoint provisioning automation and application management.
Familiarity with endpoint security tooling, including Microsoft Defender for Endpoint, BitLocker, and Intune-enforced compliance and DLP policies.
Strong working knowledge of Active Directory and Microsoft Entra ID, including GPO management, hybrid identity, and Conditional Access for endpoint policy enforcement.
Proficiency with ServiceNow or similar ITSM platforms and experience with cloud infrastructure, including Azure.
Strong troubleshooting and problem-solving skills across endpoint hardware, operating systems, and management tooling.
Proven track record of delivering large-scale projects while managing multiple priorities in a dynamic, fast-paced environment.
Exceptional oral, written, and presentation skills, with professionalism, thoroughness, and follow-up when communicating technical concepts to executives, vendors, contractors, and cross-functional teams.
Ability to operate computer equipment, speak, hear, bend, stoop, reach, and lift, move, and carry up to 25 pounds; finger dexterity is necessary.
Ability to attend the Lennar office in person during regular work hours.

Nice To Haves

Relevant certifications are a plus, such as Microsoft 365 Certified MD-102 Endpoint Administrator or Administrator Expert, Azure Administrator AZ-104, Azure Virtual Desktop Specialty, Citrix CCA-V, or equivalent.

Responsibilities

Administer and optimize Microsoft Intune for device management across Windows, macOS, iOS, and Android, including enrollment, configuration and compliance policies, app deployment, and Windows Autopilot provisioning.
Manage VDI environments such as Azure Virtual Desktop, Citrix, or VMware Horizon to support availability, performance, and a consistent user experience.
Develop and maintain endpoint security baselines, CIS benchmarks, and hardening standards in partnership with security and infrastructure teams.
Enforce endpoint security controls, including Microsoft Defender for Endpoint, BitLocker encryption, and data loss prevention policies.
Oversee endpoint patching and software updates using Intune, MECM/SCCM, or equivalent tools, and support timely vulnerability remediation.
Manage application packaging, deployment, and lifecycle, using PowerShell or similar tools for scripting and automation.
Monitor endpoint health, compliance, and fleet performance, and proactively remediate issues.
Support BYOD and corporate device programs, including enrollment, conditional access, and data separation policies through Intune App Protection Policies.
Administer endpoint-focused Conditional Access policies, RBAC, and compliance enforcement through Microsoft Entra ID and Intune.
Support endpoint provisioning and deprovisioning for joiner/mover/leaver workflows, including Autopilot enrollment and device wipe or retirement.
Partner with network engineering, application, security, and business teams to translate business requirements into scalable endpoint solutions aligned with corporate objectives and enterprise architecture standards.
Mentor junior engineers and serve as a senior technical resource for project planning and high-priority escalations.
Research and evaluate endpoint management, VDI, and device security technologies, and present recommendations to leadership.
Develop and maintain system documentation, runbooks, standard operating procedures, and engineering best practices.
Attend the Lennar office in person during regular work hours; travel may be required for conferences and vendor engagements.