Endpoint Management Engineer

Join us at Entrust

At Entrust, we’re shaping the future of identity centric security solutions. From our comprehensive portfolio of solutions to our flexible, global workplace, we empower careers, foster collaboration, and build solutions that help keep the world moving safely.

Get to Know Us

Headquartered in Minnesota, Entrust is an industry leader in identity-centric security solutions, serving over 150 countries with cutting-edge, scalable technologies. But our secret weapon? Our people. It’s the curiosity, dedication, and innovation that drive our success and help us anticipate the future.

The Endpoint Management Engineer will play a pivotal role in shaping our global colleague's digital experience. This position will focus on leveraging Microsoft Intune and related technologies to automate, streamline, and secure our endpoint environment. You will be responsible for developing and implementing modern management strategies, researching innovative solutions, and providing expert-level support. We are looking for someone who can drive efficiency, enhance security, and minimize end-user disruption through proactive and automated solutions.

Responsibilities:

Intune & SCCM/MECM Endpoint Management – 70%

Microsoft Intune Administration: Design, implement, and manage our Microsoft Intune environment for Windows 10/11 and other endpoints.

Autopilot Deployment: Lead the implementation and optimization of Windows Autopilot for streamlined device provisioning and user experience.

Application Packaging & Deployment: Develop and manage application packaging and deployment strategies using Intune and MSI, ensuring seamless software distribution.

Patch Management: Implement and automate patching strategies using Intune to maintain a secure and up-to-date endpoint environment.

Configuration Profiles & Compliance Policies: Develop and deploy configuration profiles and compliance policies to enforce security standards and ensure device compliance.

Conditional Access: Work with Global Admin to configure and manage Conditional Access policies to secure access to corporate resources.

System Management Tools: Own and manage system management tools, including SCCM (where applicable), Patch My PC, and JAMF (for macOS), with a focus on integrating with Intune.

Automation: Develop and implement automation strategies using PowerShell and other scripting languages to streamline endpoint management tasks.

Certificate Management: Implement and manage certificate deployments through Intune, including PKCS and NDES configurations (if applicable).

Research & Development: Research and recommend new technologies and solutions to improve endpoint management efficiency and security.

Colleague Support and Interaction – 20%

Provide expert-level support for Intune-related issues and other endpoint management challenges.

Act as backup to Desktop Engineers to support colleagues on any IT related issues.

Troubleshoot and resolve complex hardware and software problems.

Communicate effectively with colleagues to ensure clear understanding of solutions and timelines.

Document common issues and solutions in the knowledge base.

Ongoing Maintenance – 10%

Install, configure, and maintain hardware and software.

Drive adoption of new security policies and technologies.

Maintain accurate inventory and configuration documentation.

Assist with equipment lifecycle management.

Qualifications:

Basic Qualifications

6+ years of experience in Desktop Support or related IT roles.

3+ years of experience in Microsoft Intune administration and SCCM endpoint management.

3+ years of experience in application packaging, deployment, and patching using Intune, MSI, and SCCM.

Strong understanding of Windows Autopilot and its deployment methodologies.

Experience with Conditional Access policies and Entra AD integration.

Proficiency in PowerShell scripting for automation.

Ability to troubleshoot advanced hardware and software issues.

Must be legally authorized to work in Canada or the US.

Preferred Qualifications

Associate’s or bachelor’s degree in computer science, Information Systems, or Business

Microsoft certifications related to Intune and SCCM/MECM Desktop Management (e.g., Microsoft 365 Certified: Desktop Administrator Associate).

Experience with both Entra-joined and Entra-hybrid devices.

The ability to multitask and to work well within a team environment while always keeping the customers’ needs as a priority.

Excellent customer service skills

Experience doing complete desktop builds, repairs and working with common diagnostic tools to identify and resolve problems for end users

Ability to differentiate between errors caused by hardware, software, desktop errors, server errors and misunderstanding of usage

TCP/IP and networking fundamentals, LAN and networking troubleshooting.

Experience supporting mobile devices (Android and iOS).

Familiarity with incident/ticketing systems for tracking Service Desk tickets

Network+, MS, ITIL or HDI certifications are all a plus.

#LI-SD

At Entrust, we don’t just offer jobs – we offer career journeys. Here is what you can expect when you join our team:

Career Growth: Whether you’re a budding developer or a seasoned expert, we’re invested in your professional journey. With learning-forward initiatives and exciting challenges, your growth is our priority.

Flexibility: Life is all about balance. Whether you’re remote, hybrid, or on-site, we offer flexible options that fit your lifestyle.

Collaboration: Here, your voice matters. Our teams thrive on sharing ideas, brainstorming solutions, and working together to build a better tomorrow.

We believe in securing identities—but it doesn’t stop there. At Entrust, we’re passionate about valuing all identities. Our culture is built on diversity, inclusion, and respect. From unconscious bias training for our leaders to global affinity groups that connect colleagues across the globe, we’re creating a community where everyone is encouraged to be themselves.

Ready to Make an Impact?

If you’re excited by the prospect of innovating, growing your career, and collaborating in a dynamic environment, Entrust is the place for you. Join us in making a difference. Let’s build a more secure world—together.

Apply today!

For more information, visit Follow us on, LinkedIn, Facebook, Instagram, and YouTube

Compensation Range:

The anticipated starting base pay for this position is: $90,671-$132,985 per year (in the primary posting location). Actual compensation will be determined based on geographic location, education, skills and experience. This position is also eligible for the company’s discretionary annual incentive plan. In addition to your pay, Entrust offers eligible colleagues and their dependents comprehensive health and well-being programs which include medical, vision, dental, a generous 401(k) matching contribution, life and disability insurance, mental health coaching, virtual fitness programs, paid personal time off plus 12 paid holidays, parental leave and education reimbursement. Please speak with the recruiter for more details. Note: Benefit and Compensation programs are subject to eligibility requirements and other terms of the applicable plan or program. Entrust has the right to end, suspend or amend any of its plans at any time in whole or in part.

For US roles, or where applicable:

Entrust is an EEO/AA/Disabled/Veterans Employer

For Canadian roles, or where applicable:

Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.

If you require an accommodation, contact .

Recruiter:Steve Donahue

R003507