Systems Engineer IV - Endpoint Management

Sprouts Farmers Market•Phoenix, AZ

8d•Hybrid

About The Position

The Senior Mobile Endpoint Systems Engineer leads the strategy, design, deployment, and ongoing management of enterprise mobile and endpoint solutions across Windows, macOS, iOS, and Android. The role serves as the primary subject matter expert for Mobile Device Management (MDM), Mobile Application Management (MAM), and zero-touch device enrollment programs. It defines BYOD, COPE, and COBO policies, enforces mobile security and compliance, and collaborates with the security team on zero-trust endpoint strategy. The engineer also mentors junior engineers and drives continuous improvement across the endpoint lifecycle. The role reports to the Store Support Office in Phoenix, Arizona, with a hybrid arrangement requiring in-office presence Tuesday through Thursday. It provides technical leadership for endpoint architecture and operations, resolves escalated tier 3 incidents, and advises leadership on emerging technologies and industry trends.

Requirements

Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience.
At least 5 years in endpoint engineering or device management roles, including at least 2 years focused on mobile endpoint management (Android at scale).
Deep proficiency with Microsoft Intune (required) and experience with Kandji and/or SOTI.
Hands-on experience with Apple Business Manager (ABM), Android Enterprise, and Windows Autopilot enrollment programs.
Strong understanding of Conditional Access, Entra ID (Azure AD) device compliance, and app protection policies.
Proficiency in PowerShell (required), Bash, and/or Python for endpoint lifecycle automation.
Solid understanding of BYOD, COPE, and COBO program design, legal and privacy considerations, and policy enforcement.
Familiarity with endpoint security frameworks such as CIS Benchmarks, NIST, and DISA STIGs, and with patch management best practices.
Excellent problem-solving, analytical, written communication, and verbal communication skills.

Responsibilities

Design, deploy, and manage enterprise MDM/MAM platforms, including Microsoft Intune, Kandji, and/or SOTI, with a primary focus on mobile fleet management across iOS, Android, Windows, and macOS.
Architect and administer zero-touch enrollment programs, including Apple Business Manager (ABM/DEP), Android Enterprise Zero-Touch, and Windows Autopilot.
Implement and enforce BYOD, COPE, and COBO device policies aligned with corporate security standards and regulatory requirements.
Design and manage mobile app protection policies, app configuration profiles, and conditional access policies through Microsoft Intune and Entra ID.
Collaborate with the security team to enforce zero-trust endpoint principles, including device compliance, identity-based access, and continuous monitoring.
Manage endpoint security controls, patch management, software deployment, and compliance policy frameworks across device types.
Diagnose and resolve complex technical issues across hardware, operating systems, applications, and MDM policies, including escalated tier 3 incidents.
Perform root cause analysis on endpoint and mobile incidents and implement corrective and preventive measures.
Create and maintain documentation for mobile and endpoint architecture, enrollment procedures, policy configurations, and operational runbooks.
Provide leadership, coaching, and mentoring to junior engineers and support staff, and act as a technical escalation point across the endpoint practice.
Evaluate emerging mobile and endpoint technologies, vendors, and industry trends, and provide recommendations to leadership.

Benefits

Sick time plan
Vacation accrual plan
Opportunities for career growth
15% discount for the employee and one other family member in the household on purchases at Sprouts
Flexible schedules
Employee Assistance Program (EAP)
401(k) retirement savings plan with company match
Company-paid life insurance
Contests and appreciation events with prizes, food, and activities
Performance-based bonus, subject to eligibility requirements
Medical, dental, and vision coverage, subject to eligibility requirements
Health Savings Account with company match, subject to eligibility requirements
Pre-tax Flexible Spending Accounts for healthcare and dependent care, subject to eligibility requirements
Company-paid short-term disability coverage, subject to eligibility requirements
Paid parental leave for mothers and fathers, subject to eligibility requirements
Paid holidays, subject to eligibility requirements
DailyPay access for eligible employees