Staff Endpoint Engineer

SmithRx•Plano, TX

About The Position

SmithRx is seeking a Staff Endpoint Engineer to serve as the technical authority and architect for its enterprise endpoint infrastructure, vendor ecosystem, and IT asset strategy, while also serving as the senior-most member of the IT team in its Plano, Texas office. The role defines the multi-year technology roadmap for endpoint environments, drives organizational alignment on vendor integrations, and architects zero-touch, modern management frameworks at scale. It applies a security-first, compliance-driven approach to Windows and mixed-OS fleets and cloud workspaces, partnering with executive leadership, Security, and Compliance to support growth and meet HIPAA and SOC 2 requirements. The position leads architecture and governance for Microsoft Entra ID, Intune, Windows Autopilot, Cloud PC, and Azure Virtual Desktop. It establishes endpoint standards, security baselines, vendor frameworks, asset lifecycle governance, and automation practices. The Staff Endpoint Engineer also serves as a senior escalation point for enterprise incidents, leads root-cause analysis, authors architecture documentation, and mentors IT support and engineering teammates.

Requirements

At least 8 years of progressive experience in Systems Engineering, Enterprise Architecture, or IT Infrastructure Operations, with architectural leadership in high-growth, SaaS-driven, or regulated environments.
Deep architectural expertise in Windows OS, Microsoft Entra ID, Intune, dynamic groups, conditional access strategies, and zero-touch Autopilot deployments at scale.
Demonstrated ability to manage strategic vendor partnerships, establish vendor selection and onboarding frameworks, and influence cross-functional technical decisions.
Expertise architecting, deploying, and governing Cloud PC (Windows 365), Azure Virtual Desktop, or VDI environments for remote and third-party workforces.
Advanced PowerShell and Python scripting proficiency, including experience with REST APIs and iPaaS platforms for complex, cross-system IT automation.
Experience designing end-to-end asset governance models, enterprise hardware standards, and SaaS portfolio management strategies.
Broad operational and architectural understanding of multi-platform environments, including macOS/Apple Business Manager, Jamf or Kandji, Google Workspace, and Okta.
Extensive experience designing infrastructure compliant with HIPAA, SOC 2, ISO 27001, or equivalent regulatory frameworks.
Strong strategic vision and organizational agility, with the ability to explain complex technical architecture to C-level executives and key business stakeholders.

Nice To Haves

Enterprise-level certifications such as Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Cybersecurity Architect Expert, or CISSP.
Experience implementing modern iPaaS or workflow platforms for enterprise identity lifecycle automation.
High-level knowledge of enterprise networking topology, including Ubiquiti, zero-trust network access (ZTNA), and SD-WAN, and cloud-first identity systems such as Okta and Entra ID.

Responsibilities

Architect the enterprise Windows and modern workspace ecosystem, defining multi-year technology roadmaps, architectural standards, and security baselines for global endpoint infrastructure.
Lead the strategic design, governance, and optimization of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot, including zero-touch provisioning and continuous compliance models.
Direct vendor strategy and technical oversight for external partners; define onboarding frameworks, evaluate enterprise technologies, and align business units to maximize vendor investments.
Architect and establish governance for Cloud PC, Azure Virtual Desktop, and third-party remote environments to provide secure access for partners, contractors, and distributed teams.
Establish lifecycle governance, hardware refresh strategies, and SaaS asset management frameworks in partnership with Finance and Operations.
Architect automation frameworks using PowerShell, Python, and APIs to streamline identity lifecycle workflows, systems orchestration, and endpoint remediation.
Serve as the ultimate technical escalation point for complex enterprise incidents; lead root-cause analyses and implement structural preventative measures.
Partner with Security and Compliance leadership to align endpoint and cloud strategies with HIPAA, SOC 2, and zero-trust frameworks, including IAM controls and conditional access policies.
Set technical standards, author architecture designs and documentation such as ADRs and runbooks, and mentor IT support and engineering teammates.
Act as a technical consultant and escalation point for major incidents, supporting high availability across business-critical operations.
Serve as the senior-most member of the IT team in the Plano office.

Benefits

Medical, pharmacy, dental, vision, and life insurance, including AD&D insurance.
Flexible Spending Benefits.
401(k) Retirement Savings Program.
Short-term and long-term disability.
Discretionary Paid Time Off.
Paid company holidays.
Wellness benefits.
Commuter benefits.
Paid parental leave.
Employee Assistance Program (EAP).
Well-stocked kitchen in office locations.
Professional development and training opportunities.
Potential eligibility for bonuses, commissions, or equity.