Endpoint Management Engineer

Refer to the date listed at the top of this posting, if available. Continuous if date is blank.

Note: Applications will be accepted until 11:59 PM on the day prior to the posting end date above.

·      Generous leave including 15 days of vacation, 15 days of sick leave and 11 paid holidays annually.

·      A comprehensive Benefit Package with a generous benefit allowance to offset the cost of insurance premiums for employees and their eligible dependents.

·      Full-time 40-hour work weeks.

·      Supports the Information Services Division.

·      Salary is up to 85,000 based on education and experience.

The Endpoint Management Engineer is responsible for the design, implementation, and ongoing management of enterprise endpoint solutions within Oklahoma Management and Enterprise Services – Information Services (OMES IS). This role focuses on modern device management, automation, and secure, scalable endpoint operations across Windows, Apple, and Android platforms.

This position requires advanced PowerShell scripting skills and deep experience with Microsoft Intune, Windows Autopilot, and Apple Business Manager. The Endpoint Management Engineer works closely with IT teams and stakeholders to drive efficient device provisioning, application management, patching, and continuous improvement of endpoint services.

Position Responsibilities

·        Manage and support enterprise endpoint environments using Microsoft Intune and related technologies.

·        Configure and maintain Windows, macOS, iOS, and Android devices in a secure and compliant manner.

·        Administer Apple Business Manager (ABM) for device enrollment, provisioning, and lifecycle management.

·        Lead Windows Autopilot design, deployment, and lifecycle management strategies.

·        Develop and enforce device configuration profiles, compliance policies, and security baselines.

·        Manage application packaging, deployment, and lifecycle across all supported platforms.

·        Support Mobile Device Management (MDM) and Mobile Application Management (MAM) strategies.

·        Ensure efficient delivery, version control, and performance of enterprise applications.

·        Troubleshoot and resolve application deployment and compatibility issues.

·        Develop and maintain advanced PowerShell scripts to automate provisioning, configuration, and reporting.

·        Identify and implement automation opportunities to improve efficiency and reduce manual processes.

·        Manage endpoint patching and updates using Intune, Tanium, or similar tools.

·        Ensure compliance with security standards and timely remediation of vulnerabilities.

·        Partner with security teams to enforce endpoint protection and compliance policies.

·        Provide advanced technical support and serve as an escalation point for endpoint and device management issues.

·        Collaborate with cross-functional teams on infrastructure and endpoint initiatives.

·        Contribute to documentation, standards, and continuous improvement efforts.

·        Bachelor’s degree and 5+ years of relevant experience, OR

·        Associate’s degree and 7+ years of relevant experience, OR

·        High School Diploma or GED and 9+ years of relevant experience, OR

·        Equivalent experience (one year of relevant experience for each year of required education).

·        Advanced PowerShell scripting and automation experience.

·        Strong hands-on experience with Microsoft Intune (Endpoint Manager).

·        Experience with Windows Autopilot deployment and lifecycle methodologies.

·        Experience managing Windows, macOS, iOS, and Android devices in an enterprise environment.

·        Experience with Apple Business Manager (ABM).

·        Experience with application deployment and endpoint configuration management.

·        Strong troubleshooting and problem-solving skills in endpoint environments.

·        Experience with patch management tools such as Tanium or similar platforms.

·        Experience with Mobile Application Management (MAM) strategies.

·        Familiarity with Azure AD (Entra ID) and identity management concepts.

·        Knowledge of endpoint security and compliance best practices.

·        Experience in large-scale or government IT environments.

·        Relevant certifications (e.g., Microsoft Endpoint Manager, Azure, or similar).

·        Work is performed in a climate-controlled office environment with moderate noise levels.

·        Requires extended periods of sitting, computer use, and phone communication.

·        Occasional standing, walking, and reaching may be required.

·        Some travel may be required based on business needs.

·        May be required to participate in an on-call rotation and perform work outside of normal business hours, including evenings, weekends, and scheduled maintenance windows.

This is a full-time position, working 40 hours per week in office.

This job description is not intended to be an exhaustive list of all duties, responsibilities, or activities. Duties may change at any time with or without notice.

The State of Oklahoma is an equal opportunity employer and does not discriminate on the basis of genetic information, race, religion, color, sex, age, national origin, or disability.

Current active State of Oklahoma employees must apply for open positions internally through the Workday Jobs Hub.

If you are needing any extra assistance or have any questions relating to a job you have applied for, please click the link below and find the agency for which you applied for additional information:

Agency Contact