Note: The job is a remote job and is open to candidates in USA. Model Technology Solutions is a consulting firm specializing in AI, automation, Microsoft 365, and security for regulated mid-market and enterprise clients. The Endpoint Engineer will manage modern endpoint environments across Windows, macOS, and mobile devices, focusing on Intune engineering, application deployment, automation, security, patching, and client consulting.
Responsibilities
- Package, deploy, and support Win32 and store applications through Microsoft Intune, including custom install scripts, detection rules, requirement rules, and supersedence
- Write PowerShell detection and remediation script pairs for Intune proactive remediations, and validate them against test devices before ringed rollout
- Build and maintain Intune configuration, compliance, and security baseline policies, including migrating settings off legacy Group Policy and remediating the fallout when they diverge
- Diagnose endpoint issues from client side evidence: Intune management extension logs, application enforcement and reporting state, Autopilot and Enrollment Status Page failures, and Entra ID sign in logs
- Manage Apple endpoints through Intune, including Apple Business Manager, volume purchased app distribution, macOS configuration profiles, and macOS application deployment
- Operate monthly patching across client workstation and server fleets, including update rings, third party patch tooling, compliance verification, and troubleshooting devices that miss their window
- Support and progressively retire legacy Configuration Manager infrastructure, including collections, software distribution, and status message troubleshooting during co-management
- Deploy and support endpoint security tooling such as Microsoft Defender for Endpoint and third party allowlisting or DNS security agents
- Run client working sessions on endpoint management strategy, document deployment designs and outcomes, and manage escalations with Microsoft and third party vendors
- Communicate deployment status, risks, and remediation plans to client stakeholders throughout each rollout
Skills
- 4+ years of hands on Microsoft Intune engineering, including application packaging and deployment, configuration and compliance policy, and device enrollment
- Advanced PowerShell scripting. You should be able to write a detection and remediation pair that reads system state, logs its own decisions, and returns exit codes Intune can act on
- Demonstrated Windows Autopilot experience, including enrollment troubleshooting and Enrollment Status Page configuration
- Practical experience reading Intune and Windows client logs to root cause deployment failures rather than escalating them
- Working knowledge of Active Directory, Group Policy, and Entra ID as they affect device configuration and identity on the endpoint
- Experience operating a monthly patch cycle across a managed fleet, including ringed deployment and compliance reporting
- Apple device management through an MDM, including Apple Business Manager and volume purchased applications
- Client facing consulting ability: leading working sessions, writing documentation stakeholders can act on, and managing vendor escalations
- Microsoft Configuration Manager experience, particularly in a co-managed or migration scenario
- Microsoft certification (MD-102, SC-200, or equivalent)
- Microsoft Defender for Endpoint deployment and policy management
- MacOS deployment at scale, including shell scripting and configuration profile authoring
- Experience with third party patch management platforms and WSUS
- Familiarity with Azure fundamentals, or interest in growing toward cloud infrastructure work
- Prior consulting experience in regulated industries (healthcare, manufacturing, financial services)
Benefits
- Remote work in the United States
- Full-time employment
Company Overview