Senior IT Systems Engineer

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

• →Lead implementation, maintenance, and optimization of enterprise platforms including Entra ID (Azure AD), Microsoft 365, SSO/IAM solutions, and MDM/endpoint management tooling (Jamf, Intune, or equivalent).
• →Own the design, configuration, and enforcement of device management policies across macOS and Windows fleets — including enrollment workflows, compliance baselines, configuration profiles, and patch management.
• →Design and automate workflows for system provisioning, access lifecycle management, and endpoint configuration standardization across the environment.
• →Own root cause analysis on high-complexity system and endpoint issues, driving durable resolutions that improve long-term platform stability.
• →Collaborate with cybersecurity, infrastructure, and application teams to deliver secure, well-integrated system and endpoint architecture.
• →Lead platform upgrades, integrations, and migrations — including MDM consolidations or transitions — with a focus on business continuity and minimal operational disruption.
• →Maintain architectural documentation, system configurations, device management policies, and change procedures to support knowledge transfer and audit readiness.
• →Mentor junior engineers and contribute to team capability through training, process improvement, and best practices adoption.

• 5–7 years of experience in IT systems engineering or enterprise platform administration
• Bachelor's or Master's degree in Information Technology, Computer Science, or related field
• Hands-on expertise with MDM platforms for macOS and Windows — Jamf and/or Microsoft Intune strongly preferred; equivalent experience with Workspace ONE, Kandji, or similar platforms considered
• Expert-level proficiency in Microsoft 365, Entra ID, SSO/IAM platforms, and SaaS administration
• Deep familiarity with macOS and Windows device management — enrollment, compliance policies, configuration profiles, app deployment, and patch workflows
• Strong scripting and automation skills across PowerShell, Python, and/or Bash — including MDM-adjacent automation (e.g., Jamf API, Graph API)
• Demonstrated experience with security hardening, compliance readiness, and endpoint monitoring
• Strong documentation, collaboration, and cross-functional communication skills
• Mentorship experience and a track record of elevating team capabilities
• Relevant certifications preferred: Jamf Certified Admin (JCPA), Microsoft Certified: Endpoint Administrator, Microsoft Certified: Enterprise Administrator Expert, CISSP

• Summary updated to call out endpoint management and macOS/Windows scope — signals clearly to candidates what the core environment looks like.
• New dedicated duty added for MDM policy ownership — enrollment, compliance baselines, config profiles, patch management. This is distinct enough from general provisioning to warrant its own line.
• First duty updated to include "Jamf, Intune, or equivalent" so the expectation is clear without being exclusionary.
• Migration duty expanded to explicitly mention MDM consolidations — relevant given Tekion runs both Jamf and Intune.
• Qualifications reordered — MDM expertise moved to the top of the list since it's the primary targeting criteria.
• MDM-adjacent automation added to the scripting bullet — Jamf API and Graph API are practical differentiators worth calling out.
• Certifications updated — added Jamf Certified Admin and Microsoft Certified: Endpoint Administrator as the most directly relevant; kept the broader ones as supporting credentials.