Senior Information Systems Engineer

Accountabilities

• Endpoint Management with Microsoft Intune

  • Design, configure, and maintain Microsoft Intune configuration profiles, compliance policies, application deployments, and update rings for Windows devices.

  • Automate device, application, and policy management through the Microsoft Graph API, including bulk operations, reporting, and audit exports.

  • Manage Windows Autopilot enrollment and zero-touch provisioning for new and refreshed devices.

  • Integrate Intune with Microsoft Entra ID, formerly Azure Active Directory, to support Conditional Access, group management, and identity lifecycle processes.

  • Virtual Desktop Infrastructure with Amazon WorkSpaces

    • Build, configure, and maintain Amazon WorkSpaces bundles, custom images, and directory integrations.

    • Automate virtual desktop provisioning, patching, rebuilding, and decommissioning using AWS CLI, SDKs, and APIs.

    • Monitor performance, utilization, and costs, optimizing desktop configurations and running modes as needed.

    • Apply appropriate AWS security controls, including IAM permissions, security groups, IP access control groups, and encryption.

    • Automation and Configuration Management

      • Develop and maintain scripts using PowerShell, Python, and Bash to automate recurring end-user computing tasks.

      • Create and maintain Ansible playbooks, roles, and inventories to support endpoint and virtual desktop configuration, patching, and compliance.

      • Manage automation code through Git, follow peer-review practices, and integrate workflows into CI/CD pipelines where appropriate.

      • Identify opportunities to eliminate manual processes and improve operational consistency through reusable, maintainable automation.

      • Operations, Troubleshooting, and Technical Leadership

        • Serve as the Level 2 and Level 3 escalation point for complex endpoint, application, and virtual desktop incidents.

        • Conduct root-cause analysis of recurring technical issues and implement lasting corrective solutions.

        • Create and maintain technical documentation, operational runbooks, and knowledge base articles.

        • Mentor Level 1 engineers and service desk staff, sharing technical knowledge and supporting their development.

        • Contribute to end-user computing standards, architecture decisions, and the long-term technical roadmap.

        Requirements

        • Bachelor's degree in Computer Science, Information Systems, or a related discipline, or equivalent professional experience.

        • At least five years of experience in IT systems engineering, including a minimum of three years focused on End User Computing (EUC).

        • Strong PowerShell scripting skills, with working knowledge of Python and/or Bash for automation and API integration.

        • Hands-on experience administering Microsoft Intune at scale and automating tasks through the Microsoft Graph API, including app registration authentication, REST API calls, pagination, and throttling management.

        • Experience deploying and operating Amazon WorkSpaces, including bundles, custom images, directory services, and automated lifecycle management.

        • Knowledge of Windows 10/11, Microsoft Entra ID, Active Directory, Group Policy, and core networking concepts such as DNS, DHCP, and VPN.

        • Familiarity with Git version control and IT service management tools such as ServiceNow or Jira Service Management.

        • An automation-first mindset, with the ability to identify repetitive tasks and develop reliable, maintainable solutions.

        • Strong analytical and troubleshooting skills, including the ability to take ownership of high-impact incidents and perform structured root-cause analysis.

        • Clear written and verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences.

        • Ability to work independently, prioritize competing demands, and provide technical direction and mentorship to a small team.

        Preferred qualifications:

        • Experience with Ansible playbooks, roles, and inventories for Windows management.

        • Infrastructure-as-code experience using Terraform or AWS CloudFormation.

        • Exposure to other virtual desktop infrastructure or Desktop as a Service platforms, such as Azure Virtual Desktop, Windows 365, or Citrix.

        • Experience with Microsoft Defender for Endpoint and endpoint security baselines, including CIS and Microsoft Security Baselines.

        • Application packaging experience with Win32 applications, MSIX, or PSAppDeployToolkit.

        • Relevant professional certifications, such as Microsoft Certified: Endpoint Administrator Associate (MD-102), AWS Certified Solutions Architect – Associate, AWS Certified SysOps Administrator – Associate, or Red Hat Certified Specialist in Ansible Automation.

        Benefits

        • Annual base salary: $91,000–$110,000, depending on skills, experience, education, and applicable U.S. geographic market.

        • Work arrangement: Fully remote, with the ability to work from anywhere in the United States.

        • Medical coverage: Medical, dental, and vision insurance.

        • Health-related accounts: Access to Health Savings Accounts (HSA) and Flexible Spending Accounts (FSA), subject to eligibility.

        • Financial protection: Life insurance and Accidental Death and Dismemberment (AD&D) coverage.

        • Retirement planning: Access to a 401(k) retirement savings plan.

        • Education support: Tuition reimbursement.

        • Well-being resources: Additional resources designed to support employee health and long-term well-being.

        • Professional development: Opportunities to deepen expertise in endpoint management, cloud-based virtual desktops, automation, and enterprise IT operations.

        • Eligibility: Specific benefit availability may vary depending on employment status and applicable plan terms.