Engineer III, Endpoint Engineering

As a Senior Endpoint Engineer, you'll own the platforms and processes that build, configure, patch, and support endpoints across a global enterprise with tens of thousands of users and devices. You'll be the technical authority on our management stack (MECM, Intune, Jamf, and NinjaOne) and on the Active Directory and Group Policy foundation beneath it. You'll also lead our move to cloud-native management and Microsoft Entra.

You treat the fleet as a product and users as customers. You automate repeat work, roll out changes carefully, fix root causes, and keep the endpoint experience reliable and unobtrusive. You're self-directed, comfortable working across time zones, and effective with minimal oversight.

What You'll Do:

Own and evolve our endpoint platforms

• Engineer and administer MECM, Intune, Jamf, and NinjaOne, keeping them healthy, scalable, and well documented.
• Design and maintain Active Directory and Group Policy for Windows devices and users worldwide.
• Build and refine Intune configuration, compliance, update, and app deployment policies.

Run the device lifecycle

• Maintain provisioning and imaging workflows (task sequences, Autopilot, Jamf enrollment) for consistent, low-touch builds.
• Lead OS and feature upgrade programs with phased rollouts and clear success metrics.
• Own patching across Windows, macOS, and third-party applications, including compliance reporting and exception handling.
• Package, test, and deploy applications with application owners, and manage them through to retirement.

Modernize

• Drive the migration from on-premises tooling and GPO to Intune, including MECM co-management and preparation for Entra.
• Translate legacy policy into modern equivalents, validating each step to protect users.
• Shape the roadmap for retiring legacy tools and consolidating platforms.

Automate and measure

• Use PowerShell and Microsoft Graph API to automate provisioning, remediation, inventory, and reporting.
• Build proactive remediation and self-healing so issues are fixed before users notice.
• Create dashboards on patch posture, compliance, deployment success, and device health.

Solve hard problems

• Serve as escalation point for complex issues across platforms, operating systems (Windows, macOS, mobile), and user environments, and lead root cause analysis.
• Maintain runbooks, standards, and documentation, and manage change carefully.

Partner and lead

• Work with infrastructure, service desk, application, and security teams as a peer, and advocate for the end-user experience in design and change planning.
• Apply security baselines (such as CIS Level 1 and 2) in ways that fit how people work.
• Mentor junior engineers and explain technical trade-offs clearly to non-technical stakeholders.

What You Bring:

• Extensive enterprise endpoint engineering experience, with deep hands-on expertise in MECM and Intune.
• Working experience with NinjaOne (or a comparable RMM) and Jamf.
• Strong Active Directory and Group Policy skills, including design and troubleshooting.
• A track record of moving environments from on-premises management to Intune and co-management.
• Strong PowerShell scripting and experience with Microsoft Graph API.
• Experience with OS deployment, patch management, and application packaging at scale.
• Excellent troubleshooting across Windows, macOS, and mobile.
• Experience in large global organizations, including mixed or non-integrated environments.
• The ability to work independently, juggle competing priorities, and communicate well across teams and time zones.

Nice to Have:

• Microsoft Certified: Endpoint Administrator Associate, Azure Solutions Architect, or similar.
• Familiarity with Microsoft Entra and hybrid identity.
• Experience with SQL reporting, Power BI, or similar tools for endpoint analytics.
• Experience applying CIS benchmarks at the endpoint level.

What Sets You Apart:

• Automation mindset: If you do it twice, you script it.
• Fleet-level thinking: You plan for tens of thousands of devices, with pilots, rings, rollback plans, and measurement.
• Root cause focus: You fix the cause and build monitoring so it doesn't recur.
• User focus: You treat user impact as a design constraint.
• Ownership: You set standards, document decisions, and make the team better.
  

Required Qualifications

• 10+ years of experience in endpoint engineering, with a primary focus onActive Directory,Group Policy Management, andIntune policiesas they relate to endpoints and users.
• Proven expertise in managing endpoint platforms such as MECM, Intune, Jamf, NinjaOne, and other similar tools.
• Demonstrated ability to transition on-premises policies to cloud-based solutions, particularly Intune, and prepare for Microsoft Entra migrations.
• Experience withMicrosoft cloud-native technologies, includingMicrosoft Graph API,Azure Active Directory, and related tools for endpoint management and automation.
• Exceptional troubleshooting skills across endpoint engineering platforms, operating systems, and user domains.
• Experience navigating large global organizations with tens of thousands of users and endpoints, including integrated and non-integrated entities.
• Self-starter with a proactive mindset, capable of managing multiple responsibilities, projects, and demands in a highly dynamic global environment across multiple time zones.
• Ability to work independently with minimal oversight, driving initiatives forward while maintaining accountability and focus.
• Strong collaboration skills to engage effectively across domains and organizational levels, ensuring alignment between infrastructure, security, and business teams.

Preferred Qualifications

• Experience working in enterprise-scale environments with complex endpoint requirements.
• Certifications such as Microsoft Certified: Endpoint Administrator Associate, Azure Solutions Architect, or similar.
• Strong familiarity with Microsoft Entra and its integration into endpoint and identity management strategies.

Key Competencies

• Technical Expertise: Deep understanding ofActive Directory,Group Policy,Intune policies, and endpoint engineering platforms.
• Self-Motivation and Independence: Ability to work autonomously, managing competing priorities and navigating complex global environments with confidence and efficiency.
• User-Centric Approach: Ability to prioritize user experience and productivity in policy design and implementation.
• Problem-Solving: Proficiency in identifying and resolving complex endpoint engineering issues.
• Collaboration: Strong ability to work across teams and domains, fostering partnerships between infrastructure, security, and business units.
• Communication: Ability to clearly articulate technical concepts and advocate for user experience in cross-functional discussions.

We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned