What are the responsibilities and job description for the Principal Engineer – Endpoint position at Rapport Talents, a Primo Talents Company?
A Principal Engineer responsible for configuring, installing, maintaining, and upgrading endpoint hardware and software; administering secure operating systems; designing and implementing backup and recovery procedures; and providing operational support for servers, desktops, printers, storage, and enterprise systems.
What you will be doing:
- Serve as a key technical advisor to IT leadership, leading enterprise-wide endpoint management across Windows, macOS, Linux/Unix, iOS, and Android to ensure security, scalability, and alignment with business goals.
- Implement proactive monitoring to track device health, software compliance, and endpoint security—identifying trends, resolving issues, and ensuring high availability.
- Oversee full lifecycle management of all endpoint devices, including procurement, deployment, configuration automation, and decommissioning to maintain consistency and compliance.
- Lead automated software deployment and patch management programs to ensure all devices remain secure, current, and compliant with corporate and regulatory standards.
- Manage imaging, provisioning, and automated configuration processes for efficient device rollout.
- Enforce encryption, security baselines, and real-time compliance reporting across all platforms.
- Administer MDM platforms and automate policy enforcement for Windows, Linux, iOS, and Android devices.
Minimum Requirements:
- Bachelor’s degree in Information Technology, Computer Science, or a related field.
- Relevant certifications (e.g., Microsoft Modern Desktop Administrator, Jamf Certified Technician) highly preferred.
- 10 years of enterprise endpoint management or desktop engineering experience.
- Proven background managing large-scale, multi-OS environments (Windows, macOS, Linux/Unix, iOS, Android).
- Strong proficiency with SCCM, Intune, Jamf, and major MDM platforms for provisioning, compliance, and policy enforcement.
- Advanced scripting skills (PowerShell, Bash, Python, Go) for automation and configuration management.
- Experience with Active Directory / Azure AD and directory services integration.
- Deep knowledge of endpoint security: encryption, vulnerability remediation, access controls, and compliance frameworks.
- Demonstrated experience building endpoint monitoring systems for fleet-wide health, compliance, and performance visibility.
- Endpoint Tools: SCCM, Intune, Jamf, AirWatch, MobileIron
- Operating Systems: Windows, macOS, Linux/Unix, iOS, Android
- Scripting & Automation: PowerShell, Bash, Python
- Configuration & Policy Management: Automated configuration policy enforcement
- Software Deployment: Automated patching and distribution
- Security: BitLocker, FileVault, vulnerability management, compliance enforcement
- Monitoring: Device health dashboards, proactive compliance tracking
- Directory Services: AD, Azure AD
- MDM: iOS/Android provisioning, compliance, and security controls
Nice to Have:
- Certifications such as CompTIA Mobility , Microsoft Modern Desktop Administrator Associate, or equivalent.
- Experience designing large-scale automation frameworks or endpoint reliability programs.
- Background in Zero Trust device security or enterprise compliance automation.