Staff Endpoint Engineer

SmithRx•Plano, TX

2d•$136,000 - $160,000

About The Position

SmithRx is seeking a Staff Endpoint Engineer to serve as the technical authority and architect for enterprise endpoint infrastructure, vendor ecosystem, and IT asset strategy, and as the senior-most IT team member in its Plano, Texas office. The role defines the multi-year technology roadmap for endpoint environments, aligns vendor integrations, and architects zero-touch, modern management frameworks at scale. The position applies a security-first, compliance-driven approach to Windows and mixed-OS fleets, cloud workspace strategies such as CloudPC and Azure Virtual Desktop, and enterprise endpoint standards. The engineer partners with executive leadership and Security and Compliance teams to support scalable infrastructure that meets HIPAA and SOC 2 requirements, while mentoring engineering teams across the organization.

Requirements

At least 8 years of progressive experience in Systems Engineering, Enterprise Architecture, or IT Infrastructure Operations, with architectural leadership experience in high-growth, SaaS-driven, or regulated environments.
Deep architectural expertise in Windows OS, Microsoft Entra ID, Intune, dynamic groups, conditional access strategies, and large-scale zero-touch Autopilot deployments.
Experience managing strategic vendor partnerships, establishing vendor selection and onboarding frameworks, and influencing cross-functional technical decisions.
Expertise architecting, deploying, and governing CloudPC (Windows 365), Azure Virtual Desktop, or VDI environments for remote and third-party workforces.
Advanced PowerShell and Python scripting skills, with experience using REST APIs and iPaaS platforms to automate cross-system IT processes.
Experience designing end-to-end asset governance models, enterprise hardware standards, and SaaS portfolio management strategies.
Operational and architectural understanding of multi-platform environments, including macOS/Apple Business Manager, Jamf or Kandji, Google Workspace, and Okta.
Extensive experience designing infrastructure compliant with HIPAA, SOC 2, ISO 27001, or equivalent regulatory frameworks.
Strategic vision, organizational agility, and ability to explain complex technical architecture to C-level executives and business stakeholders.

Nice To Haves

Enterprise-level certifications such as Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Cybersecurity Architect Expert, or CISSP.
Experience implementing modern iPaaS or workflow platforms for enterprise identity lifecycle automation.
High-level knowledge of enterprise networking topology, including Ubiquiti, zero-trust network access (ZTNA), or SD-WAN, and cloud-first identity systems such as Okta or Entra ID.

Responsibilities

Define the multi-year technology roadmap, architectural standards, and security baselines for enterprise endpoint infrastructure.
Lead the strategic design, governance, and optimization of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot, including zero-touch provisioning and continuous compliance.
Direct vendor strategy and technical oversight, establish onboarding frameworks, evaluate enterprise technologies, and align business units to maximize vendor investments.
Architect and govern CloudPC, Azure Virtual Desktop, and third-party virtual workspaces for partners, contractors, and distributed teams.
Establish asset lifecycle governance, hardware refresh strategies, and SaaS asset management frameworks in partnership with Finance and Operations.
Architect automation frameworks using scripting, APIs, and related tools to streamline identity lifecycle workflows, systems orchestration, and endpoint remediation.
Serve as the ultimate technical escalation point for complex incidents, lead root-cause analyses, and implement long-term preventative improvements.
Partner with Security and Compliance leadership to align endpoint and cloud strategies with HIPAA, SOC 2, and zero-trust frameworks, including IAM controls and conditional access policies.
Set technical standards, author architecture designs and runbooks, and mentor IT support and engineering teammates.
Provide technical consulting and escalation leadership for major incidents and support resilient, high-availability business-critical operations.