Endpoint Engineer

This position is a contract-to-hire position. It requires four days per week onsite in Tempe, AZ.

Key Responsibilities

• Administer Jamf Pro for the macOS endpoint fleet, including device enrollment, configuration profiles, policy management, application deployment, and security baseline enforcement
• Manage PDQ Connect for Windows endpoint patching, software deployment, inventory collection, and remote remediation across distributed field and corporate environments
• Author and maintain PowerShell and command-line scripts for software packaging, application deployment, endpoint automation, and reporting workflows
• Package, test, and deploy software applications through PDQ Connect and Jamf Pro, ensuring consistent installation, validation, and rollback capability across the fleet
• Maintain endpoint configuration standards, security baselines, and compliance requirements aligned with Sundt IT and Cybersecurity policies, including CMMC Level 2 readiness considerations
• Troubleshoot endpoint management platform issues including failed deployments, agent health degradation, policy conflicts, and configuration drift
• Collaborate with the Service Desk, Hardware Technology, and Application Engineering teams on escalations involving endpoint configuration, software deployment failures, or platform-level issues
• Document endpoint engineering processes, packaging standards, deployment runbooks, and platform configurations in the team knowledge base
• Evaluate and recommend improvements to endpoint management tooling, automation opportunities, security posture, and operational efficiency
• Support endpoint lifecycle activities including imaging baselines, refresh cycles, decommissioning workflows, and asset disposition coordination

Knowledge:

• Three or more years administering Jamf Pro or equivalent enterprise macOS management platform.
• Demonstrated production experience with PDQ Connect, PDQ Deploy, or comparable Windows endpoint management platforms (SCCM/MECM, and Intune)
• Working knowledge of Windows 11 endpoint operating systems and macOS administration
• Understanding of software deployment lifecycle, application packaging, and software distribution mechanics across mixed-OS environments
• Familiarity with Active Directory, Microsoft Entra ID, and identity integration with endpoint management platforms

Skills:

• Proficient PowerShell scripting for endpoint automation, software deployment, system configuration, and operational reporting
• Command-line (CMD/Batch) scripting for Windows software packaging and silent installer wrapping
• Application packaging across multiple installer types: MSI, EXE, scripted installers, and macOS PKG
• Endpoint security configuration and policy authoring (compliance baselines, conditional access integration, FileVault, BitLocker)
• Troubleshooting and root-cause analysis on endpoint management platforms and the underlying operating systems

Abilities:

• Balances priorities across Mac and Windows fleets simultaneously
• Communicates effectively with both technical peers and non-technical end users
• Self-directs in a distributed corporate-and-field IT environment
• Documents work consistently and contributes to team knowledge management

Preferred

• Experience with Microsoft Intune
• Familiarity with patch management strategies including PatchMyPC, Microsoft Update for Business, or third-party patch automation
• Microsoft certifications: MD-102 (Endpoint Administrator), MS-102 (Microsoft 365 Administrator)
• Jamf Certified Tech or Jamf Certified Admin
• ITIL 4 Foundation or equivalent service management framework