Principal Engineer – Endpoint

A Principal Engineer responsible for configuring, installing, maintaining, and upgrading endpoint hardware and software; administering secure operating systems; designing and implementing backup and recovery procedures; and providing operational support for servers, desktops, printers, storage, and enterprise systems.

What you will be doing:

• Serve as a key technical advisor to IT leadership, leading enterprise-wide endpoint management across Windows, macOS, Linux/Unix, iOS, and Android to ensure security, scalability, and alignment with business goals.
• Implement proactive monitoring to track device health, software compliance, and endpoint security—identifying trends, resolving issues, and ensuring high availability.
• Oversee full lifecycle management of all endpoint devices, including procurement, deployment, configuration automation, and decommissioning to maintain consistency and compliance.
• Lead automated software deployment and patch management programs to ensure all devices remain secure, current, and compliant with corporate and regulatory standards.
• Manage imaging, provisioning, and automated configuration processes for efficient device rollout.
• Enforce encryption, security baselines, and real-time compliance reporting across all platforms.
• Administer MDM platforms and automate policy enforcement for Windows, Linux, iOS, and Android devices.

Minimum Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Relevant certifications (e.g., Microsoft Modern Desktop Administrator, Jamf Certified Technician) highly preferred.
• 10+ years of enterprise endpoint management or desktop engineering experience.
• Proven background managing large-scale, multi-OS environments (Windows, macOS, Linux/Unix, iOS, Android).
• Strong proficiency with SCCM, Intune, Jamf, and major MDM platforms for provisioning, compliance, and policy enforcement.
• Advanced scripting skills (PowerShell, Bash, Python, Go) for automation and configuration management.
• Experience with Active Directory / Azure AD and directory services integration.
• Deep knowledge of endpoint security: encryption, vulnerability remediation, access controls, and compliance frameworks.
• Demonstrated experience building endpoint monitoring systems for fleet-wide health, compliance, and performance visibility.
• Endpoint Tools:
  SCCM, Intune, Jamf, AirWatch, MobileIron
• Operating Systems:
  Windows, macOS, Linux/Unix, iOS, Android
• Scripting & Automation:
  PowerShell, Bash, Python
• Configuration & Policy Management:
  Automated configuration + policy enforcement
• Software Deployment:
  Automated patching and distribution
• Security:
  BitLocker, FileVault, vulnerability management, compliance enforcement
• Monitoring:
  Device health dashboards, proactive compliance tracking
• Directory Services:
  AD, Azure AD
• MDM:
  iOS/Android provisioning, compliance, and security controls

Nice to Have:

• Certifications such as CompTIA Mobility+, Microsoft Modern Desktop Administrator Associate, or equivalent.
• Experience designing large-scale automation frameworks or endpoint reliability programs.
• Background in Zero Trust device security or enterprise compliance automation.