Endpoint Engineering Lead

Build the Future
At McGraw Hill, we are dedicated to delivering digital learning experiences that transform education for learners and educators. Our focus is on creating seamless, impactful products that truly benefit our users while supporting growth and collaboration across teams. We foster a culture that values innovation, teamwork, and a balance between career growth and personal well-being.

How can you make an impact?

The Digital Workplace Endpoint Engineering Lead is responsible for leading the design, implementation, and lifecycle management of enterprise endpoint platforms and end-user computing solutions. This role ensures the stability, security, and scalability of endpoint technologies-including Windows, macOS, and mobile device management-across the organization. The position provides technical leadership to engineers, drives automation and modernization initiatives, and collaborates closely with security, operations, and digital workplace teams to deliver a seamless employee experience.

This is a remote position open to applicants authorized to work for any employer within the United States.

What You'll Do:

Technical Leadership:

• Lead and mentor a team of endpoint engineers, including specialists in Windows and Apple ecosystems, and provide strategic direction and technical oversight across the full endpoint portfolio.
• Bring deep Jamf Pro expertise while maintaining working knowledge of Windows endpoint management to effectively guide, review, and support the work of Windows-focused team members.
• Establish technical standards, configuration baselines, and best practices across macOS and Windows platforms.
• Serve as the senior escalation point for complex endpoint issues across both Apple and Windows ecosystems.

Platform Ownership:

• Design, administer, and continuously optimize Jamf environment and full Apple device lifecycle management from zero-touch enrollment to offboarding.
• Oversee and manage macOS, iOS, and iPadOS configuration profiles, smart groups, policies, patch management, and compliance frameworks within Jamf Pro.
• Provide oversight and strategic guidance for Windows endpoint management and Intune-based workflows managed by your team.
• Integrate endpoint platforms with identity, security, and collaboration systems including Okta, Entra ID/Azure AD.

Modernization & Automation:

• Drive modernization of Apple endpoint management through advanced Jamf Pro workflows and Jamf Connect.
• Collaborate with Windows engineers on modernization efforts including Autopilot, Intune compliance policies, and cloud-native device management.
• Develop and maintain Bash and Python scripts to automate deployment, software updates, compliance reporting, and self-service workflows.
• Evaluate and implement emerging technologies including AI-assisted endpoint management and experience analytics tools.

Security & Compliance:

• Partner with Cybersecurity teams to enforce macOS security baselines, CIS benchmarks, and data protection standards through Jamf Pro.
• Provide leadership oversight on Windows security baselines and Intune compliance policies.
• Manage FileVault encryption and compliance monitoring across the Apple fleet.
• Conduct periodic audits, remediation workflows, and configuration drift analysis across both platforms.

Collaboration & Support:

• Partner with Service Desk, Infrastructure, and Application teams to enhance the end-user experience across Apple and Windows environments.
• Develop documentation, configuration standards, and knowledge base content for cross-team enablement.
• Mentor team members, fostering cross-platform awareness and helping Windows-focused engineers grow understanding of macOS management and vice versa.

Who You Are:

• Bachelor's degree in Computer Science, Information Systems, or related field (or equivalent experience).
• 7+ years of experience in endpoint engineering or EUC roles, with at least 2 years in a technical leadership position.
• Deep technical expertise in:
  • Jamf Pro at an advanced/Jamf 400 level
  • macOS deployment, configuration profiles, and compliance management
• Proficiency in automation and scripting (Bash,Python)
• Familiarity with Okta and Entra ID integration with Jamf
• Working knowledge of Microsoft Intune and Windows endpoint management

Preferred Qualifications

• Jamf Certified Expert (Jamf 400) or equivalent - strongly preferred.
• Experience managing large-scale Apple fleets (500+ devices) in enterprise environments.
• Knowledge of zero-touch provisioning via Apple Business Manager (ABM) and Automated Device Enrollment (ADE).
• Familiarity with Microsoft Intune, Autopilot, and Windows compliance frameworks.
• Experience in hybrid environments (on-prem + cloud).
• Proven ability to lead cross-functional endpoint teams and mentor technical staff across platforms.

Core Competencies

• Jamf 300 Certification
• Strong analytical and troubleshooting skills.
• Excellent communication and documentation abilities.
• Strategic and collaborative mindset.
• Commitment to automation, security, and user experience excellence.

Why work for us?

The work you do at McGraw Hill will be work that matters. We are collectively building experiences that will help shape the future of education. Play your part and experience a sense of fulfilment that will inspire you to even greater heights.

The pay range for this position is between $120,000 - $160,000 annually. However, base pay offered may vary depending on job-related knowledge, skills, experience, and location. An annual bonus plan may be provided as part of the compensation package, in addition to a full range of medical and/or other benefits, depending on the position offered. Click here to learn more about our benefit offerings.

McGraw Hill recruiters always use a "@mheducation.com" email address and/or from our Applicant Tracking System, iCIMS. Any variation of this email domain should be considered suspicious. Additionally, McGraw Hill recruiters and authorized representatives will never request sensitive information in email.

McGraw Hill uses an automated employment decision tool (AEDT) to assist in the screening process by recommending candidates with "like skills" based on resume and job data. To request an alternative screening process, please select "Opt-Out" when asked to "Consent to use of Automated Employment Decision Tools" during the application.