About this role

Endpoint Engineer Role Overview

The Endpoint Engineer is responsible for the design, engineering, security, automation, and lifecycle management of enterprise Windows and Apple endpoints. This role serves as a technical subject matter expert for Microsoft Intune, SCCM/MECM, Windows Autopilot, Jamf Pro, endpoint provisioning, security configuration, and Endpoint Privilege Management (EPM).

The engineer will lead initiatives to modernize endpoint management, transition legacy management capabilities toward cloud-native solutions, improve endpoint security, automate provisioning and remediation, and establish scalable endpoint engineering standards across the enterprise.

Key Responsibilities

✓Design, engineer, and maintain enterprise endpoint management solutions using Microsoft Intune, SCCM/MECM, Jamf Pro, and Windows Autopilot.
✓Serve as a technical SME for Windows and macOS endpoint architecture, management, provisioning, security, and troubleshooting.
✓Lead the modernization and migration of traditional SCCM workloads toward Intune and cloud-native endpoint management.
✓Design and maintain Intune configuration profiles, compliance policies, security baselines, device restrictions, and remediation solutions.
✓Architect and optimize Windows Autopilot and Apple Automated Device Enrollment to provide standardized zero-touch provisioning.
✓Engineer SCCM/Intune co-management solutions and determine appropriate workload migration strategies.
✓Administer and engineer Jamf Pro for enterprise macOS management, including configuration, application deployment, FileVault, security policies, scripting, and automated provisioning.
✓Design endpoint security standards using technologies including Microsoft Defender for Endpoint, BitLocker, FileVault, Attack Surface Reduction, Windows Firewall, device control, application control, and security baselines.
✓Design and implement Microsoft Intune Endpoint Privilege Management (EPM) to reduce permanent local administrator access and enforce least-privilege principles.
✓Develop and maintain application packaging and deployment solutions across Intune, SCCM, and Jamf.
✓Develop automation using PowerShell, Microsoft Graph API, Graph PowerShell SDK, REST APIs, and shell scripting.
✓Automate device provisioning, application deployment, configuration validation, compliance reporting, security remediation, inventory, and endpoint lifecycle activities.
✓Integrate endpoint compliance and security controls with Microsoft Entra ID and Conditional Access.
✓Establish engineering standards for endpoint provisioning, configuration, security, patching, application deployment, and lifecycle management.
✓Provide Level 3 engineering support and root-cause analysis for complex Windows, macOS, enrollment, provisioning, application, and security issues.
✓Partner with Cybersecurity, IAM, Infrastructure, Service Desk, and other technology teams to align endpoint architecture with enterprise security and operational requirements.
✓Create technical standards, architecture documentation, SOPs, implementation plans, and operational procedures.
✓Mentor junior engineers and support teams while providing technical leadership for endpoint initiatives.

Required Qualifications

✓6+ years of experience in endpoint engineering, desktop engineering, endpoint security, or enterprise device management.
✓Advanced experience with Microsoft Intune and SCCM/MECM.
✓Strong experience with Windows Autopilot and modern Windows provisioning.
✓Experience administering and engineering Jamf Pro and enterprise macOS environments.
✓Strong knowledge of Windows 10/11, macOS, Entra ID, device identity, and Conditional Access.
✓Strong PowerShell scripting and automation experience.
✓Experience with application packaging, deployment, patching, and remediation.
✓Strong understanding of endpoint security, least privilege, device compliance, and configuration management.
✓Experience designing and implementing enterprise-scale endpoint solutions.
✓Demonstrated ability to troubleshoot complex endpoint and provisioning issues.

Preferred Qualifications

Experience with Intune Endpoint Privilege Management, Microsoft Defender for Endpoint, Microsoft Graph API, Windows Hello for Business, Apple Business Manager, enterprise PKI/certificate-based authentication, CIS/Microsoft security benchmarks, vulnerability management, and large-scale SCCM-to-Intune modernization initiatives is highly desirable.

Fortive Corporation Overview

Fortive’s essential technology makes the world safer and more productive. We accelerate transformation in high-impact fields like workplace safety, build environments, and healthcare.

We are a global industrial technology innovator with a startup spirit. Our forward-looking companies lead the way in healthcare sterilization, industrial safety, predictive maintenance, and other mission-critical solutions. We’re a force for progress, working alongside our customers and partners to solve challenges on a global scale, from workplace safety in the most demanding conditions to advanced technologies that help providers focus on exceptional patient care.

We are a diverse team 10,000 strong, united by a dynamic, inclusive culture and energized by limitless learning and growth. We use the proven Fortive Business System (FBS) to accelerate our positive impact.

At Fortive, we believe in you. We believe in your potential—your ability to learn, grow, and make a difference.

At Fortive, we believe in us. We believe in the power of people working together to solve problems no one could solve alone.

At Fortive, we believe in growth. We’re honest about what’s working and what isn’t, and we never stop improving and innovating.

Fortive: For you, for us, for growth.

We Are an Equal Opportunity Employer. Fortive Corporation and all Fortive Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law.

Fortive and all Fortive Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at applyassistance@fortive.com.

Bonus or Equity

This position is also eligible for bonus as part of the total compensation package.