[Hiring] Senior Endpoint Engineer @Selene Finance LP

Role Description

The Senior Endpoint Engineer is responsible for the design, implementation, administration, security, and lifecycle management of enterprise endpoint technologies supporting Microsoft Windows workstation and server environments. This position provides technical leadership for endpoint management platforms, operating system deployment, software packaging, patch management, configuration management, and endpoint security across an environment of more than 1,000 endpoints.

The Senior Endpoint Engineer works closely with Information Security, Infrastructure, Service Desk, and business stakeholders to maintain secure, stable, and highly available endpoint systems. This role requires advanced troubleshooting skills, strong automation capabilities, and experience managing Microsoft Intune and enterprise Remote Monitoring and Management (RMM) platforms.

Essential Duties and Responsibilities

• Administer and maintain Microsoft Intune and enterprise endpoint management platforms supporting Windows workstations and servers.
• Administer and support enterprise RMM solutions (e.g., BigFix, Automox, Ivanti, NinjaOne) or comparable platforms.
• Administer and support enterprise network monitoring solutions (e.g. SolarWinds, Datadog, LogicMonitor).
• Manage endpoint environments exceeding 1,000 devices across office, data center, and remote workforce scenarios.
• Design, build, test, document, and deploy enterprise application packages and software updates.
• Create and maintain packages using Adobe Enterprise Packages, Adobe Customization Wizard, Microsoft Office Deployment Tool (ODT), Windows Installer (MSI), Orca, PowerShell, batch scripting, and other silent or unattended installation methods.
• Plan and execute operating system deployments, feature upgrades, application deployments, patching, and endpoint lifecycle activities.
• Develop automation and remediation scripts using PowerShell and other approved scripting technologies.
• Implement and maintain endpoint security configurations aligned with organizational requirements and recognized standards, including CIS Benchmarks and DISA STIGs.
• Configure, manage, and troubleshoot Windows Defender Firewall and other host-based firewall controls.
• Partner with Information Security to remediate vulnerabilities, address configuration drift, and improve endpoint hardening.
• Troubleshoot complex Windows issues involving NTFS and share permissions, Group Policy, registry settings, COM and DCOM components, services, drivers, application dependencies, and operating system performance.
• Analyze and resolve software installation failures, patching errors, upgrade issues, compliance exceptions, and endpoint security concerns.
• Monitor and report on endpoint health, inventory, compliance, patch status, deployment success, and configuration baselines.
• Create and maintain technical documentation, standard operating procedures, deployment standards, support runbooks, and system diagrams.
• Lead or contribute to technology refreshes, operating system migrations, application modernization, endpoint platform improvements, and cloud management initiatives.
• Collaborate with vendors and internal teams to evaluate, implement, and support endpoint technologies.
• Serve as an escalation point for complex endpoint incidents and provide technical mentorship to junior engineers and support personnel.
• Follow established change management and Change Advisory Board procedures before implementing production changes.
• Participate in an on-call rotation and perform periodic evening or weekend work for planned maintenance, deployments, upgrades, and emergency troubleshooting.

Qualifications

• Advanced experience administering Microsoft Intune in an enterprise environment.
• Experience with RMM platforms such as BigFix, Automox, Ivanti, NinjaOne, or equivalent solutions.
• Experience managing Microsoft Windows workstation and server environments with more than 1,000 endpoints.
• Demonstrated expertise in application packaging, software deployment, operating system deployment, patch management, and endpoint lifecycle management.
• Strong understanding of MSI packaging, MST transforms, silent installation switches, detection logic, dependencies, supersedence, and rollback planning.
• Proficiency with PowerShell scripting, automation, and systems administration.
• Knowledge of endpoint security controls, vulnerability remediation, operating system hardening, CIS Benchmarks, and DISA STIGs.
• Advanced troubleshooting skills involving Windows, Active Directory, Microsoft Entra ID, Group Policy, file permissions, registry settings, services, and COM components.
• Ability to analyze complex technical issues, assess production risk, and implement sustainable solutions.
• Excellent written and verbal communication, documentation, teamwork, and customer service skills.
• Ability to manage multiple priorities and meet deadlines in a fast-paced environment.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field is preferred.
• A minimum of five years of progressively responsible enterprise endpoint engineering or endpoint management experience is required.
• Experience managing Microsoft Intune and Windows environments containing 1,000 or more endpoints is strongly preferred.
• Equivalent combinations of education, technical training, certifications, and relevant professional experience may be considered.

Benefits

• Paid Time Off (PTO)
• Medical, Dental & Vision
• Employee Assistance Program
• Flexible Spending Account
• Health Savings Account
• Paid Holidays
• Company paid Life Insurance
• Matching 401(k) Plan