Endpoint Engineer

Job DescriptionJob DescriptionWe're not looking for someone who just knows Intune - we're looking for someone who loves solving problems, explaining the tricky stuff in plain English, and being the calm voice in a crisis. At Square10, clients stay with us because we pair deep expertise with personality. If you thrive on variety, like working with smart and candid teammates, and want a role where teaming never stops, this Endpoint Engineer role is for you. Only candidates located in the greater Boston, New York City, Philly or Washington, D.C. metro areas will be considered. Qualified candidates should submit resumes to recruiting@square10.net WHY SQUARE10 We help IT leaders cut through complexity and make confident decisions. Our clients - leading law firms and professional services organizations - stick with us because we deliver measurable results and we're great to work with. If you're the person teams call in a crunch and you explain the hard stuff in plain English, you'll fit right in. THE ROLE You'll lead endpoint modernization for our clients - hands-on engineering plus clear, calm guidance. One day you're deploying Intune/Autopilot, the next you're troubleshooting MS365 add-ins or mentoring an in-house team. Variety is the norm; adaptability is the edge. WHAT YOU'LL DO Design, deploy, and support Microsoft Intune & Autopilot across Windows 11Configure MDM/MAM for IOS and AndroidLead transitions from SCCM/GPO to modern Intune/AutopilotBuild compliance & configuration profiles, security baselines, and Win32 app deploymentsDiagnose Microsoft 365 Apps for Enterprise issues (performance add-ins)Provide proactive operations and maintenance for endpoint estatesTroubleshoot AD, GPO and app deployment issuesImplement Azure Virtual Desktop (AVD) & Windows 365 Cloud PC (including FSLogix)Mentor client IT teams on industry-standard practicesJoin a 24/7 on-call rotationEarn/maintain Microsoft certifications WHAT YOU'LL BRING 3-5 years in desktop engineering & app support (consulting/proservices a plus)Hands-on Intune, Autopilot compliance/config profiles, security baselines, Win32, MDM/MAM for IOS/AndroidSCCM expertise, including migrations to modern managementProven expertise moving orgs from SCCM/GPO to Intune/AutopilotDeep skills troubleshooting Windows 11, MS365 Apps, installs/compatibilityStrong grasp off Entra ID device states and identity integrationProficiency with AD/GPO/GPPKnowledge of endpoint design, security, optimization practicesScripting/automation familiarity (PowerShell, WMI, Graph API)Ability to translate complex concepts for technical and non-technical audiencesSelf-directed, organized and steady under shifting prioritiesProfessional client presence; sound judgment and escalation habitsCuriosity and a continuous-learning mindset NICE-TO-HAVE Endpoint hardening with Defender for Endpoint & Conditional AccessMicrosoft Purview (eDiscovery, DLP, Insider Risk)Advanced AVD & Windows 365 Cloud PCUser data migration (OneDrive, FSLogix, Work Folders)Citrix Virtual Apps & Desktops exposuremacOS device management (Intune or third-party)Azure AD SSO, Conditional Access, modern authCompliance frameworks (NIST, ISO 27001, HIPAA, GDPR) HOW WE WORK We listen first, solve fast and keep communication open and honest - no jargon shields, no pedestal talk. You'll collaborate with people who are confident without being cocky and flexible without being fuzzy. LOCATION AND BENEFITS Hybrid by design: remote work balanced with client site visits across the greater Boston/NYC/Philly/Washington DC metro areas (~25-40% on-site; occasional travel beyond). Full time salary with bonus potential, 401 (k) and company-sponsored training and certifications. And yes - we actually encourage you to use your time off. This role is an excellent opportunity for a self-starter who thrives in a learning-focused environment and is passionate about delivering exceptional service to clients. Square10 is an Equal Opportunity Employer and considers all qualified applicants without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability, veteran status or any other protected characteristic under applicable law. READY TO APPLY? Send your resume to recruiting@Square10.net. If your experience doesn't line up 1:1 but you're clearly strong on modern management and love solving problems for people, we're all ears. Only candidates located in the greater Boston, New York City, Philly or Washington, D.C. metro areas will be considered. Qualified candidates should submit resumes to recruiting@square10.net