Role Overview

Own the technical design and maturity of Microsoft Intune configuration, compliance, and policy design across Windows, macOS, iOS, and Android (including BYOD security models).
Define workplace technology standards, configuration baselines, and lifecycle strategy across endpoint, mobility, and collaboration-integrated devices.
Own the design and governance of the enterprise application catalog, including packaging standards, deployment patterns, lifecycle and patch management, and integration with Intune and Microsoft 365 application delivery models.
Design Windows Autopilot, mobile enrollment, and cloud-native management models integrated with Microsoft Entra ID, Conditional Access, and Microsoft 365 compliance frameworks.
Develop PowerShell and Microsoft Graph automation to orchestrate cross-platform configuration governance, policy deployment, and automated remediation across endpoint and Microsoft 365 services.
Establish standards and engineering practices that deliver a consistent and reliable end user experience across enterprise devices and workplace technologies.
Contribute to Power Platform governance by managing Power Automate environments, establishing automation standards, and supporting secure workflow integration across Microsoft 365 services.
Implement and govern endpoint, mobility, and identity-aligned security controls consistent with Zero Trust design and Microsoft 365 security best practices.
Contribute to Microsoft 365 collaboration governance, including Teams policy design, SharePoint Online integration standards, and lifecycle management patterns for collaboration workspaces.
Own the design standards and lifecycle strategy for Microsoft Teams Rooms and meeting room technologies, ensuring alignment with Teams service governance and collaboration platform controls.
Lead Azure Virtual Desktop (AVD) design and modernization, including image strategy, profile management, and integration with Microsoft 365 identity and productivity services.
Own the design and lifecycle strategy for enterprise print services, including secure configuration baselines and cloud/hybrid print modernization.
Contribute to modern workplace roadmap planning, including platform maturity initiatives, Copilot readiness considerations, and secure service enablement within Microsoft 365.
Act as final escalation point for systemic platform issues across endpoint, mobility, collaboration-integrated devices, virtual desktop, and print infrastructure.
Mentor administrators and adjacent engineering teams in modern workplace architectural standards, automation practices, and governance models.
Participate in 24x7 on-call rotation with accountability for assigned platform domains.

Requirements

5+ years of enterprise endpoint engineering experience across Windows, macOS and enterprise mobility platforms (iOS and Android).
Deep experience designing and governing Microsoft Intune configuration, compliance, and policy frameworks.
Strong PowerShell and Microsoft Graph automation experience, including scalable deployment and remediation patterns.
Experience designing Windows Autopilot and modern device enrollment strategies.
Strong understanding of endpoint and mobility security controls (Windows Hello for Business, LAPS, Endpoint Privilege Management, configuration baselines, MAM/BYOD controls).
Experience managing Power Automate environments and contributing to Power Platform governance, including environment strategy and DLP policy configuration.
Working knowledge of Microsoft 365 compliance, information protection, and collaboration service integration.
Experience contributing to Microsoft Teams policy design and SharePoint Online governance patterns.
Experience leading platform modernization initiatives or architectural redesign efforts.
Experience with Azure Virtual Desktop design and image strategy.
Experience designing and governing enterprise print services (cloud/hybrid print models).
Experience designing and governing Microsoft Teams Rooms or similar meeting room technologies.
Working knowledge of identity-device integration, Conditional Access, and Zero Trust principles.
Ability to translate business and security requirements into scalable technical designs.

Tech Stack

Android
Azure
Cloud
iOS
MacOS

Benefits

Medical Option to select either a PPO plan or one of 2 high – deductible medical plans that includes a company contribution to your personal health savings bank account.
Dental Delta Dental PPO & an option to select an enhanced dental plan.
Vision Routine preventative coverage under medical plan and an option to elect additional voluntary coverage.
All employees receive 11 holidays off per year, as well as paid time off that starts at a minimum of two weeks per year.
401K Plan Company match of up to 4% as long as employees contribute a minimum of 6% to the account. An additional profit-sharing contribution is also made to employee accounts if the company meets its annual targets.
Company provided short-term & long-term disability.
Life and AD&D insurance.
Flexible spending accounts.
Voluntary critical illness & accident coverage.
New parent phase-in program & paternity leave.
Educational assistance reimbursement.
Product discounts & a wellness program.

Nature's Way

Open Positions (1)

Engineering

Modern Workplace Engineer