Endpoint Engineer

The Enterprise Platform and Endpoint Engineer will be responsible for managing, securing, and optimizing Active Directory (AD) environments and Office 365 services. They will play a crucial role in the administration, maintenance, and support of AD and O365 systems, ensuring seamless integration, security, and compliance within the organization's IT infrastructure. The Platform and Endpoint Engineer will be responsible for implementing and maintaining the security and performance of endpoint devices across our organization. They will also work closely with cross-functional teams to ensure our endpoint infrastructure is robust, secure, and scalable. The Platform and Endpoint Engineer's goal is to ensure the end-users have a seamless and productive experience by resolving issues around employee access and device utilization.

Job Responsibilities:

• Manage and support the AD infrastructure, including users, groups, permissions, and resolving issues like replication or DNS problems.

• Administer Azure AD with a focus on Conditional Access, MFA, Single Sign-On integrations, and Role-Based Access Control (RBAC) to ensure a secure identity framework.

• Implement identity governance policies for privileged access and automate lifecycle management.

• Administer and support Office 365 services (Exchange Online, SharePoint Online, Teams, OneDrive, etc.) for all users within the organization

• Ensure security and compliance of AD and O365 environments by managing access control, auditing, and compliance reports

• Implement and manage endpoint solutions, ensuring optimal performance, security, and scalability across various platforms (Windows, macOS, Linux, mobile devices)

• Develop and enforce endpoint security policies, including malware protection, encryption, patch management, and Zero Trust principles.

• Collaborate with the security team to develop and maintain endpoint protection measures against evolving threats.

• Oversee the lifecycle of endpoints from provisioning, management, and decommissioning, using tools for automation and configuration management

• Identify, diagnose, and troubleshoot complex issues across a wide range of devices and platforms.

• Implement endpoint management tools, solutions, and automation processes to improve operational efficiency.

• Drive continuous improvement by identifying and resolving complex technical issues and integrating new technologies and methodologies.

• Create and maintain clear, detailed documentation for AD and O365 configurations, processes, and troubleshooting guides.

Job Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent work experience).

• 4+ years of experience in Active Directory administration, Office 365/Microsoft 365 management, and cloud identity solutions.

• Strong understanding of Active Directory architecture, including DNS, Group Policy, replication, and user management.

• Hands-on experience with Office 365 administration, including Exchange Online, SharePoint, Teams, and OneDrive.

• Experience with Azure Active Directory, hybrid environments, and directory synchronization using Azure AD Connect.

• Familiarity with scripting languages, particularly PowerShell, for automating administrative tasks.

• Demonstrated expertise in managing Azure AD—including Conditional Access, MFA, and RBAC—and implementing secure identity governance.

• 4+ years of experience in endpoint management, security, and systems engineering

• Strong expertise in endpoint security tools (e.g., antivirus, VPN, device encryption)

• 2+ years of experience with endpoint management platforms such as Intune, Jamf, or similar.

• Deep understanding of operating systems (Windows, macOS, Linux) and mobile platforms (iOS, Android).

• Knowledge of Azure cloud environment and its integration with endpoint management

• Strong problem-solving skills, with the ability to analyze and resolve complex technical issues.

• Excellent communication and collaboration skills, with a proven ability to work effectively in cross-functional teams.

• Experience with incident response and forensic investigations related to endpoint security breaches is a plus.