Implement, administer, and optimize endpoint management solutions using Microsoft Endpoint Manager (Intune and SCCM/MECM)
Support design and deployment of endpoint solutions across Windows, macOS, iOS, and Android environments
Manage device provisioning and configuration using Windows Autopilot and co-management (Intune + SCCM)
Administer mobile device management (MDM) and mobile application management (MAM) policies to secure enterprise devices and data
Perform patch management and ensure endpoint compliance with security baselines and organizational policies
Monitor endpoint health, performance, and compliance; proactively remediate issues and enforce configuration standards
Manage endpoint security configurations including encryption, compliance policies, and access controls
Troubleshoot and resolve complex endpoint issues impacting user productivity; perform root cause analysis (RCA)
Serve as a Tier 3 escalation point for endpoint-related incidents and service requests
Automate endpoint management tasks using PowerShell and scripting tools
Collaborate with Security, Infrastructure, and Service Desk teams to align endpoint solutions with business and security requirements
Maintain documentation, standard operating procedures (SOPs), and configuration standards
Stay current with industry trends and best practices in endpoint management, EUC, and modern workplace technologies
Participate in on-call rotation and provide support for critical incidents as needed
Other duties as assigned

Bachelor’s degree in computer science, Information Systems, or a related discipline; OR demonstrated capability to perform job responsibilities with a High School Diploma/GED and at least four (4) years of previous relevant work experience
Three (3) years of experience in endpoint engineering, desktop engineering, or end user computing (EUC) environments
Hands-on experience with Microsoft Endpoint Manager including Intune and SCCM/MECM
Experience with Windows Autopilot and modern device provisioning
Experience managing multi-platform environments including Windows, macOS, iOS, and Android
Strong understanding of MDM (Mobile Device Management) and MAM (Mobile Application Management)
Experience with Azure AD (Entra ID), Active Directory, Group Policy (GPO), and Microsoft 365 services
Experience with patch management, application deployment, and endpoint lifecycle management
Basic to intermediate PowerShell scripting and automation experience
Strong troubleshooting and problem-solving skills in enterprise environments
Excellent communication skills and ability to work cross-functionally
Ability to work flexible hours and participate in on-call support rotations
Available for occasional overnight travel (10%)
Must pass a ten (10) year background check and pre-employment drug test
Must be legally eligible to work in the country in which the position is located
Authorization to work in the US is required. This position is not eligible for visa sponsorship.

Potential need to work flexible hours and be available to respond on short-notice
Regular attendance and punctuality
Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Passion and Fun
Promote JetBlue’s #1 value of safety as a Safety Ambassador, supporting JetBlue’s Safety Management System (SMS) components, Safety Policy, and behavioral standards

IT Endpoint Engineer

Key skills