Endpoint Engineer MDM

Job Title: Endpoint Engineer MDM

Location: Palo Alto CA

Duration: 12 Months

Role Summary

This is an onsite contract role based at Rubrik's Palo Alto Headquarters. The Endpoint Engineer is responsible for the design, implementation, and ongoing management of the organization s device ecosystem. This role focuses on automating the lifecycle of hardware and virtual desktops to ensure a seamless, secure, and "zero-touch" experience for our global workforce. You will serve as the subject matter expert for Apple and Windows management and our cloud desktop infrastructure.

Technical Environment

Apple (macOS & iOS): Jamf Pro

Windows & Android: Microsoft Intune / Endpoint Manager

Virtual Desktop: Amazon WorkSpaces (AWS)

Scripting: PowerShell, Bash, Python

Key Responsibilities

1. Unified Endpoint Management (UEM)

Daily Operations: Perform daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.

Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.

Apple Fleet: Architect and maintain the Jamf Pro environment for all macOS and iOS devices. Manage configuration profiles, policies, and patch management.

Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.

Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.

2. Virtual Desktop Infrastructure (VDI)

Administer and optimize Amazon WorkSpaces.

Manage WorkSpaces directories, custom bundles, and image creation/maintenance.

Troubleshoot connectivity and performance issues within the AWS ecosystem.

3. Automation & Engineering

Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs.

Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment.

Implement automated reporting for hardware inventory, license compliance, and security

auditing.

4. Security & Compliance

Enforce endpoint security standards, including FileVault/BitLocker encryption and EDR agent health.

Partner with Security teams to remediate vulnerabilities across the endpoint fleet.

Required Qualifications

Experience: Minimum 3 5 years in an Endpoint Engineering or MDM-focused role.

Jamf Mastery: Proven experience managing both macOS and iOS at scale via Jamf Pro.

Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.

VDI Expertise: Hands-on experience with Amazon WorkSpaces administration.

BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).

Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.

Identity: Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO.

Education & Certifications

Bachelor s degree in Computer Science, IT, or equivalent professional experience.

Relevant certifications (e.g., Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner) are a plus.