Modern Endpoint Engineer

HealthPartners is currently hiring a Modern Endpoint Engineer to join our Infrastructure Deployment Services team. In this role, the individual is responsible for designing, deploying, securing, and managing the enterprise's modern workplace ecosystem. The position leverages Configuration Manager (onprem), Microsoft Endpoint Manager (Intune), Azure Active Directory, and related technologies to deliver reliable application deployment, effective patch management, and a secure, productive enduser experience.

The role is well suited for a professional who thrives in a fastpaced enterprise environment and values automation, standardization, and continuous improvement.

This position reports to the Manager of Infrastructure Deployment Services and is part of an eightperson team that includes a QA Manager, SMS Administrators, Engineers, and an Analyst.

Required Qualifications:

• Bachelor's degree or equivalent professional experience
• Four (4) years of experience performing Client Service Administration
• Six (6) years of IT experience
• Professional experience with Microsoft Endpoint Manager (Intune) and Configuration Manager
• Expert in troubleshooting device setup, policy conflicts, app deployment, and OS issues
• Strong experience providing excellent IT services within IT and to business partners.
• Familiarity with enterprise collaboration platforms: M365 Apps, OneDrive, Teams
• Experience calculating capacity needs.
• Skilled in large-scale deployment planning
• Basic network knowledge
• Ability to communicate clearly with technical and nontechnical audiences.
• Excellent documentation skills (SOPs, deployment guides, change records)
• Strong analytical and troubleshooting skills with a methodical approach.
• Comprehensive knowledge of both macOS and Windows desktop operating systems
• Overall understanding of IT infrastructure
• General understanding of Service Administration
• Able to be on call 24 x7.

Preferred Qualifications:

• Microsoft 365 administration and MS Graph API
• Develop dashboards and reporting (Intune, Defender, Power BI, compliance)
• Experience with Entra and on-prem AD and hybrid-join environments
• PowerShell scripting with handson experience using the PowerShell App Deployment Toolkit (PSADT)
• Experience with ServiceNow, Jira, or other ITSM platforms
• Jamf: Apple device management

Hours/Location:

• M-F; core business hours
• This role participates in a oneweek oncall rotation, scheduled approximately every fifth week.
• This position offers a flexible hybrid work arrangement, combining onsite and remote work.

Responsibilities:

• Device & OS Management
  • Manage and optimize Microsoft Intune / Endpoint Manager policies, configuration profiles, compliance baselines, and app deployments.
  • Administer Windows updates via Windows Autopatch
  • Lead OS lifecycle planning, builds, security baselines, and patching strategies.
• Automation & Operational Efficiency
  • Build and maintain automated workflows using PowerShell, Graph API, and Intune management tools.
  • Standardize configurations, implement structured build processes, and leverage automated deployment solutions to minimize operational workload.
• Security & Compliance
  • Implement and maintain security baselines and hardening standards (Defender, BitLocker, Conditional Access, Zero Trust principles)
  • Partner with Security teams to identify vulnerabilities, improve posture, and support compliance initiatives.
• Application Management
  • Package, deploy, and maintain modern applications using Configuration Manager and Intune Win32 app packaging.
  • Troubleshoot application deployment failures and enduser impact.
• Support & Troubleshooting
  • Function as an escalation point for complex endpoint issues.
  • Monitor environment health, perform root-cause analysis, and implement corrective actions.
  • Provide guidance and documentation to support teams and end-users.
• Collaboration & Strategy
  • Work closely with Infrastructure, Security, and Service Desk teams to deliver a worldclass end-user experience.
  • Contribute to roadmap planning related to endpoint management, device strategy, and modernization initiatives.