Endpoint Engineer
Full Time 110000 - 140000 USD per-year-salaryJob Overview
AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.
We are seeking an experienced Endpoint Engineer with 3–5 years of hands-on experience managing, supporting, and optimizing endpoint devices across a dynamic IT environment.
The ideal candidate will have a strong preferred focus on Microsoft SCCM/MECM and Microsoft Intune for Windows Endpoint Management, as well as experience using tools such as Tanium and JAMF. This role supports Windows, macOS, Chrome OS, and Linux devices and is critical to ensuring the security, reliability, and performance of endpoint systems across the organization.
AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.
At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.
We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.
We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.
We are seeking an experienced Endpoint Engineer with 3–5 years of hands-on experience managing, supporting, and optimizing endpoint devices across a dynamic IT environment.
The ideal candidate will have a strong preferred focus on Microsoft SCCM/MECM and Microsoft Intune for Windows Endpoint Management, as well as experience using tools such as Tanium and JAMF. This role supports Windows, macOS, Chrome OS, and Linux devices and is critical to ensuring the security, reliability, and performance of endpoint systems across the organization.
Key Responsibilities:
- Manage and support endpoint devices, with a primary emphasis on Windows endpoints via SCCM and Microsoft Intune, as well as Chromebooks and Apple devices (via JAMF).
- Troubleshoot and resolve endpoint-related issues to ensure optimal performance and minimal downtime.
- Provide Tier 3 support for endpoint-related incidents and service requests.
- Administer and optimize Microsoft SCCM/MECM and Microsoft Intune and/or Tanium for device provisioning, configuration management, software deployment, and compliance enforcement.
- Administer JAMF to support Apple device management, including policy enforcement, updates, and application deployments.
- Manage Windows endpoint configurations using Group Policy, SCCM, Intune, and related endpoint management tools.
- Develop and execute patching strategies for all endpoint devices, with a strong focus on Windows patching through SCCM/MECM and Intune.
- Coordinate patch testing, deployment, and validation to ensure security compliance while minimizing user impact.
- Monitor patch compliance and remediation status, addressing failures or discrepancies promptly.
- Manage and support Chromebooks, including policy enforcement, system updates, and troubleshooting.
- Collaborate with vendors and internal teams to resolve hardware or software issues.
- Ensure endpoint devices comply with organizational security policies and standards.
- Support vulnerability assessment and remediation activities, particularly for Windows endpoints managed via SCCM/MECM and Intune.
- Partner with cybersecurity teams to address endpoint-related risks and improve overall security posture.
- Identify opportunities to automate and optimize endpoint management processes, especially within SCCM/MECM and Intune workflows.
- Develop scripts and automation using PowerShell, Python, or Bash to streamline deployments, patching, and configuration management.
- Maintain detailed documentation of endpoint configurations, processes, and troubleshooting procedures.
- Generate and deliver reports on endpoint health, patch compliance, and performance metrics, particularly for SCCM and Intune-managed devices.
- Work closely with IT support, cybersecurity, and infrastructure teams to align endpoint strategies with organizational goals.
- Communicate effectively with stakeholders and end users, providing technical guidance and support as needed.
Endpoint Management and Support
Device Management Solutions
Patch Management
Chromebook Support
Security and Compliance
Automation and Optimization
Documentation and Reporting
Collaboration and Communication
Qualifications:
- 3–5 years of experience in endpoint management and support.
- Strong hands-on experience with Microsoft SCCM/MECM and Microsoft Intune (preferred) for Windows endpoint management.
- Experience with Tanium and JAMF for endpoint administration.
- Proven ability to support Windows devices, Chromebooks, and
- Strong knowledge of Windows OS, macOS/iOS, and Chrome OS.
- In-depth experience with patch management processes, particularly using SCCM and Intune.
- Proficiency in PowerShell (preferred), Python, or Bash for automation.
- Familiarity with Active Directory, Group Policy, Azure AD, and device enrollment programs.
- Strong analytical and troubleshooting skills.
- Excellent written and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
- Mentor
- Microsoft certifications (e.g., Modern Desktop Administrator Associate, Endpoint Administrator).
- Tanium Certified Operator and/or JAMF Certified Technician.
Experience
Apple devices.
Technical Skills
Soft Skills
Certifications (Preferred)
Work Environment:
- Occasional travel may be required to support remote offices or teams.
If you are a proactive, detail-oriented Endpoint Engineer with a strong focus on SCCM/MECM and Intune, we would love to hear from you. Apply now and help drive a secure, modern endpoint environment.
The compensation range indicated in this posting reflects the On-Target Earnings (“OTE”) for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate’s relevant experience, qualifications, and geographic location.
Why AHEAD:
Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.
We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.
USA Employment Benefits include:
- Medical, Dental, and Vision Insurance
- 401(k)
- Paid company holidays
- Paid time off
- Paid parental and caregiver leave
Use of AI:
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, or to capture recordings and create transcriptions or summaries during interviews. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.
If you would like more information about how your data is processed, please refer to the Candidate Privacy Notice or contact us at [email protected].
You may opt-out of the review or analysis of your application and resume by AI tools by using the General Application. Please include the role you wish to apply for in the Additional Information field. You may also choose to opt-out of recording and transcription at any time, including after joining an interview. Candidates will not be penalized for choosing to opt-out.