Senior Windows Engineer, Endpoint Engineering

Ares Management Corporation•Los Angeles, CA

1d•$125,000 - $140,000

About The Position

The Senior Windows/SCCM/Intune Engineer is responsible for the architecture, engineering, automation, security, and lifecycle management of the firm's global Windows endpoint environment. This role serves as a senior technical leader within End User Engineering, driving enterprise device management strategies across Microsoft Configuration Manager (SCCM/MECM), Microsoft Intune, Microsoft Entra ID, and Windows 11 platforms. The engineer will design and maintain modern endpoint management solutions, software deployment frameworks, operating system lifecycle processes, compliance enforcement, and endpoint security configurations. This individual will collaborate closely with Information Security, Infrastructure, Service Desk, Unified Communications, and Application teams to deliver a secure, scalable, and highly automated digital workplace experience for employees worldwide.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Engineering, or related technical field.
7+ years of enterprise endpoint engineering experience.
5+ years managing Microsoft Configuration Manager (SCCM/MECM).
3+ years managing Microsoft Intune in a large enterprise environment.
Strong written and verbal communication skills
Ability to manage multiple projects and priorities simultaneously
Experience working in global enterprise environments, preferably in financial services or other highly regulated environments
Willingness to travel (approximately 10-25%)

Nice To Haves

Advanced degree strongly preferred.
Experience supporting environments with 5,000+ endpoints preferred.
Experience in financial services, healthcare, legal, or highly regulated industries preferred.
Microsoft Certified: Endpoint Administrator Associate
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Enterprise Administrator Expert
Microsoft Certified: Security Operations Analyst Associate
ITIL Foundations
MCM, MCSE, or equivalent legacy Microsoft certifications
Microsoft 365
Defender XDR
Nexthink
ServiceNow
Azure Virtual Desktop
Windows 365
Azure Infrastructure
Enterprise mobility management
Zero Trust architectures

Responsibilities

Design, implement, and support enterprise Windows endpoint management solutions.
Manage and optimize Microsoft Configuration Manager (SCCM/MECM) infrastructure.
Lead migration initiatives from traditional SCCM management toward cloud-native management using Microsoft Intune.
Engineer and maintain Microsoft Intune policies for device compliance, configuration, security baselines, endpoint protection, and application deployment.
Develop and maintain device provisioning strategies utilizing: Windows Autopilot, Microsoft Intune, Hybrid Azure AD Join, Entra ID Join.
Establish endpoint configuration standards across global environments.
Drive hardware refresh and operating system modernization initiatives.
Maintain endpoint inventory, reporting, and lifecycle management processes.
Lead Windows 11 deployment, maintenance, and upgrade programs.
Develop and maintain enterprise OS deployment task sequences and Autopilot provisioning packages.
Engineer standardized endpoint configuration profiles and provisioning methodologies.
Manage feature updates, quality updates, and servicing channels.
Perform application compatibility testing and remediation.
Develop rollback and contingency plans for large-scale deployment initiatives.
Package, test, deploy, and maintain enterprise software solutions.
Develop deployment methodologies utilizing: Intune Win32 Applications, SCCM Applications, PowerShell, Winget.
Troubleshoot complex installation and application-related issues.
Create detection methods, superseding strategies, and deployment automation workflows.
Manage application lifecycle processes from onboarding through retirement.
Develop automation solutions using: PowerShell, PowerShell App Deployment Toolkit (PSADT), Graph API, Azure Automation, Azure Functions.
Automate administrative tasks and operational processes.
Create self-healing and proactive remediation scripts.
Develop reporting, monitoring, and compliance automation solutions.
Reduce operational overhead through infrastructure-as-code methodologies.
Partner with Information Security teams to implement endpoint security controls.
Engineer and maintain: Intune Patch Management / Autopatch, SCCM/WSUS software updates, Attack Surface Reduction Rules, Device Control Policies, BitLocker Encryption, Security Baselines, Group Policy Management, Conditional Access integrations.
Ensure compliance with regulatory and corporate security requirements.
Evaluate vulnerabilities and coordinate remediation activities.
Support audit readiness and security reviews.
Support and integrate: Microsoft Intune, Microsoft Entra ID, Microsoft Defender, Microsoft 365 Apps, Windows Update for Business, Microsoft Graph.
Develop modern management strategies aligned with Microsoft's cloud-first approach.
Manage co-management capabilities between SCCM and Intune.
Optimize device management through cloud-based services and automation.
Utilize Digital Experience Monitoring tools such as: Nexthink, Microsoft Endpoint Analytics, Lakeside SysTrack, ControlUp.
Analyze endpoint health and performance trends.
Develop initiatives to improve: Device performance, Boot times, Reliability, Application experience, Employee productivity.
Create executive-level reporting and operational dashboards.
Create and maintain: Technical documentation, Standard operating procedures, Engineering standards, Runbooks, Knowledge articles.
Develop operational dashboards and reporting metrics.
Maintain architecture diagrams and platform documentation.
Drive continuous process improvement initiatives.
Serve as Tier 3/Level 4 escalation support for complex endpoint issues.
Perform root cause analysis for recurring incidents and service disruptions.
Participate in maintenance windows and critical incident response activities.
Establish monitoring and alerting strategies for endpoint services.
Maintain service reliability and performance targets.