Senior Mobile Device Management (MDM) Engineer

PowerSchool Group • Dallas, TX

7d

About The Position

At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families. Our Information Technology (IT) team leads all aspects of IT systems and processes across the enterprise, including data services, security, compliance, applications, automation, and end-user services. Through innovative and streamlined technology solutions, this dynamic team enables company growth, protects data, and serves as a critical partner to all departments of PowerSchool.

Requirements

• Bachelor of Science in Computer Science, Information Technology, or a related field
• 6-10 years of experience in Systems Engineering, Endpoint Engineering, or a similar role
• Hands-on experience with Microsoft Intune (device management, application deployment, compliance policies)
• Strong knowledge of Windows and macOS administration
• Experience with Azure AD / Entra ID, device identity, and access management
• Solid understanding of endpoint lifecycle management and ITSM processes
• Experience troubleshooting enterprise-level system and device issues
• Experience patching endpoints via Automox and Intune, with working knowledge of OS hardening methods for macOS and Windows

Nice To Haves

• Experience with MDM migration projects (e.g., JAMF to Intune)
• Familiarity with scripting (PowerShell, Bash) and automation tools
• Experience with Autopilot, VDI, or Windows 365
• Knowledge of ITIL practices and service management platforms (e.g., Freshservice)

Responsibilities

• Own end-to-end strategy, architecture, and execution for enterprise device management using Microsoft Intune and related technologies
• Serve as the primary subject matter expert and accountable owner for endpoint compliance, security posture, and lifecycle governance across the organization
• Manage and optimize the full device lifecycle — provisioning, enrollment, compliance, patching, and retirement — for all employee devices
• Develop and maintain configuration profiles, compliance policies, and application deployment strategies
• Own and oversee planning, execution, coordination, and delivery across supporting administrators and technicians
• Own complex MDM and patching initiatives end-to-end, including the rollout of new solutions such as PAM (Privileged Access Management), RBAC (Role-Based Access Control), and other enterprise toolsets
• Serve as the point person for new toolset rollouts, including permission elevation tools and RMM (Remote Monitoring and Management) platforms
• Own complete OS validation processes for MDM, patching, and compliance ahead of major OS architecture changes — assessing compatibility, testing enrollment and policy behavior, and certifying readiness before enterprise-wide rollout
• Engineer and support core endpoint platforms across Windows, macOS, and mobile devices
• Own the organization's virtual desktop infrastructure (VDI), including provisioning, deprovisioning, operational management, and overall service health
• Manage vendor relationships and coordinate strategic planning for long-term platform sustainability across MDM and VDI environments
• Partner with infrastructure teams on identity (Entra ID/Azure AD), access, and conditional access policies
• Monitor system health and performance, proactively identifying and resolving issues
• Maintain documentation for system configurations, standards, and processes
• Lead the definition and enforcement of enterprise hardware and asset standards that ensure ongoing MDM compliance and compatibility across the device fleet
• Align hardware and vendor selection decisions with MDM platform requirements, ensuring new devices meet compatibility, compliance, and Autopilot registration standards before deployment
• Own the process ensuring all new endpoints are properly registered and provisioned through Autopilot, partnering with vendors to streamline registration at time of purchase
• Evaluate emerging endpoint technologies and market trends; make recommendations on hardware selection and standards for the organization
• Automate endpoint deployment and management processes (Autopilot, scripting, policy automation)
• Improve system efficiency by reducing manual processes and standardizing configurations across the endpoint environment
• Drive enterprise-wide initiatives focused on IT automation and workflow optimization
• Provide technical leadership on major enterprise initiatives, coordinating and directing the work of other administrators and technicians on cross-functional projects
• Serve as the Tier 3 escalation point for complex endpoint and system issues
• Collaborate with Service Desk and regional IT teams on incident resolution and root cause analysis
• Participate in on-call or critical incident response as needed
• Serve as technical leader for lower-level administrators and technicians, providing assistance with projects, processes, and solution development
• Define and execute enterprise-wide endpoint security and compliance strategy, including remediation efforts across all devices
• Implement endpoint security controls aligned with enterprise security standards
• Manage endpoint patching across Automox and Intune, ensuring consistent, timely patch compliance across all managed devices
• Apply OS hardening standards and best practices for both macOS and Windows to reduce attack surface and meet enterprise security baselines
• Support compliance initiatives through policy enforcement and device posture management
• Partner with InfoSec on risk mitigation and vulnerability management

Benefits

• Comprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)
• Flexible Spending Accounts and Health Savings Accounts
• Short-Term Disability and Long-Term Disability
• Comprehensive 401(k) plan
• Generous Parental Leave
• Unrestricted paid time off (known as Discretionary Time Off - DTO)
• Wellness Program, including ClassPass & Employee Assistance Program
• Tuition Reimbursement
• Pet Insurance
• Identity Theft Protection
• Student Debt Repayment Program
• Prepaid Legal coverage

What This Job Offers

• Job Type: Full-time
• Career Level: Senior