Endpoint Engineer - Modern Mobility Solutions

- Act as the primary Intune administrator overseeing Windows, iOS, iPadOS, and Android, including MDM/MAM policies, compliance measures, configuration profiles, and application deployment - Oversee Conditional Access compliance integration with Entra ID, regularly monitoring enrollment health and compliance dashboards and addressing failures across all platforms - Manage application deployment through Intune, including IntuneWin packages, Microsoft Store apps, and app protection policies for both corporate and BYOD devices - Develop and uphold Autopilot deployment profiles and enrollment workflows for zero-touch workstation provisioning across our expanding fleet - Handle device registration, manage hardware hash imports, and oversee profile assignments; collaborate with procurement and Service Desk for intake of new devices - Troubleshoot issues related to Autopilot enrollment and keep runbooks updated for common failure scenarios - Work closely with the UEM & Packaging Engineer on app sequencing to ensure complete compliance during provisioning - Administer Intune MDM/MAM for corporate and BYOD devices across iOS, iPadOS, and Android: handling enrollment, policies, app deployment, compliance, and remote management - Manage Apple Business Manager integration with Intune, including maintaining DEP enrollment profiles and VPP app licenses - Configure app protection policies for BYOD and oversee mobile device lifecycle from provisioning to retirement - Troubleshoot mobile enrollment and compliance problems, collaborating with Networking on WiFi and connectivity needs - Administer SOTI MobiControl for rugged Android handhelds and RF scanners in manufacturing contexts - Coordinate enrollment, configuration profiles, app deployment, and kiosk policies for plant-floor device groups - Address issues with plant-floor devices, working with plant operations and Networking on WiFi coverage and VLAN specifications - Support device staging for new site openings and plant expansions - Administer Jamf Pro for approximately 100 Mac devices, including enrollment, configuration profiles, patch management, and compliance reporting - Provide Tier 2/3 assistance for macOS issues and maintain packaging workflows and runbooks - Manage IGEL OS thin client configurations, policies, and patching in cooperation with the Networking & Hardware Services team - Support thin client deployments for new sites and uphold configuration standards and deployment runbooks - Ensure deployment and maintenance of endpoint security measures, encryption policies, local administrator password management, and device control regulations - Maintain endpoint hardening baselines across various platforms, working with InfoSec on gap remediation - Assist in managing the enterprise digital signage platform (Skykit): overseeing device enrollment and content policy across ProAmpac locations - Take charge of endpoint asset data integrity in Lansweeper for assigned device types and foster compliance with asset management processes via the Service Desk - Maintain proficiency in application packaging (MSI, IntuneWin) to independently build and deploy packages via Intune while providing coverage for team counterparts - Develop and sustain runbooks, SOPs, and change logs in ServiceDesk Plus, and engage in the Change Advisory Board (CAB) - Take part in the Endpoint Engineering on-call rotation, providing Tier 2/3 support as needed