Senior Mobile Device Management (MDM) Engineer

Job description

Key Responsibilities

Endpoint & MDM EngineeringOwn end-to-end strategy, architecture, and execution for enterprise device management using Microsoft Intune and related technologiesServe as the primary subject matter expert and accountable owner for endpoint compliance, security posture, and lifecycle governance across the organizationManage and optimize the full device lifecycle — provisioning, enrollment, compliance, patching, and retirement — for all employee devicesDevelop and maintain configuration profiles, compliance policies, and application deployment strategiesOwn and oversee planning, execution, coordination, and delivery across supporting administrators and techniciansOwn complex MDM and patching initiatives end-to-end, including the rollout of new solutions such as PAM (Privileged Access Management), RBAC (Role-Based Access Control), and other enterprise toolsetsServe as the point person for new toolset rollouts, including permission elevation tools and RMM (Remote Monitoring and Management) platformsOwn complete OS validation processes for MDM, patching, and compliance ahead of major OS architecture changes — assessing compatibility, testing enrollment and policy behavior, and certifying readiness before enterprise-wide rolloutSystems & Platform OwnershipEngineer and support core endpoint platforms across Windows, macOS, and mobile devicesOwn the organization's virtual desktop infrastructure (VDI), including provisioning, deprovisioning, operational management, and overall service healthManage vendor relationships and coordinate strategic planning for long-term platform sustainability across MDM and VDI environmentsPartner with infrastructure teams on identity (Entra ID/Azure AD), access, and conditional access policiesMonitor system health and performance, proactively identifying and resolving issuesMaintain documentation for system configurations, standards, and processesAsset Management & Technology StandardsLead the definition and enforcement of enterprise hardware and asset standards that ensure ongoing MDM compliance and compatibility across the device fleetAlign hardware and vendor selection decisions with MDM platform requirements, ensuring new devices meet compatibility, compliance, and Autopilot registration standards before deploymentOwn the process ensuring all new endpoints are properly registered and provisioned through Autopilot, partnering with vendors to streamline registration at time of purchaseEvaluate emerging endpoint technologies and market trends; make recommendations on hardware selection and standards for the organizationInfluence enterprise-wide technology decisions through advanced technical expertise and market awarenessAutomation & OptimizationAutomate endpoint deployment and management processes (Autopilot, scripting, policy automation)Improve system efficiency by reducing manual processes and standardizing configurations across the endpoint environmentDrive enterprise-wide initiatives focused on IT automation and workflow optimizationTechnical Leadership & EscalationProvide technical leadership on major enterprise initiatives, coordinating and directing the work of other administrators and technicians on cross-functional projectsServe as the Tier 3 escalation point for complex endpoint and system issuesCollaborate with Service Desk and regional IT teams on incident resolution and root cause analysisParticipate in on-call or critical incident response as neededServe as technical leader for lower-level administrators and technicians, providing assistance with projects, processes, and solution developmentSecurity & ComplianceDefine and execute enterprise-wide endpoint security and compliance strategy, including remediation efforts across all devicesImplement endpoint security controls aligned with enterprise security standardsManage endpoint patching across Automox and Intune, ensuring consistent, timely patch compliance across all managed devicesApply OS hardening standards and best practices for both macOS and Windows to reduce attack surface and meet enterprise security baselinesSupport compliance initiatives through policy enforcement and device posture managementPartner with InfoSec on risk mitigation and vulnerability management Qualifications: Minimum QualificationsBachelor of Science in Computer Science, Information Technology, or a related field6-10 years of experience in Systems Engineering, Endpoint Engineering, or a similar roleHands-on experience with Microsoft Intune (device management, application deployment, compliance policies)Strong knowledge of Windows and macOS administrationExperience with Azure AD / Entra ID, device identity, and access managementSolid understanding of endpoint lifecycle management and ITSM processesExperience troubleshooting enterprise-level system and device issuesExperience patching endpoints via Automox and Intune, with working knowledge of OS hardening methods for macOS and WindowsPreferred QualificationsExperience with MDM migration projects (e.g., JAMF to Intune)Familiarity with scripting (PowerShell, Bash) and automation toolsExperience with Autopilot, VDI, or Windows 365Knowledge of ITIL practices and service management platforms (e.g., Freshservice)Certifications such as Microsoft Endpoint Administrator Associate or similar Compensation & Benefits: Compensation & BenefitsPowerSchool offers the following benefits:Comprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)Flexible Spending Accounts and Health Savings AccountsShort-Term Disability and Long-Term DisabilityComprehensive 401(k) planGenerous Parental LeaveUnrestricted paid time off (known as Discretionary Time Off - DTO)Wellness Program, including ClassPass & Employee Assistance ProgramTuition ReimbursementOptional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverageThe compensation range is specific to the United States and it incorporates many factors including but not limited to an applicant's skills and prior relevant experience and training; licensures, degrees, and certifications; internal equity; internal pay ranges; and market data/range parameters. EEO Commitment: EEO CommitmentPowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing accomodations@powerschool.com.