Endpoint Systems Lead (Hybrid) - Main IT Infrastructure - Full Time - Days

The Endpoint Services Lead is responsible for the strategy, design, administration, and operational oversight of the organization's Windows endpoint environment. This role provides leadership for endpoint engineering and management services, including Windows device lifecycle management, operating system deployment, software distribution, patch management, endpoint security, and compliance.

The Endpoint Services Lead develops technical roadmaps, evaluates emerging technologies, and drives initiatives that improve endpoint performance, reliability, security, and user experience across the enterprise. This position serves as the technical leader for the Endpoint Services team and collaborates closely with Infrastructure, Information Security, Clinical Applications, and Epic teams to ensure endpoint technologies support clinical workflows, security requirements, and organizational objectives.

Endpoint Engineering & Management

• Lead the design, implementation, and support of enterprise endpoint management solutions, including Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM).
• Manage the full lifecycle of Windows endpoints, including provisioning, deployment, configuration, maintenance, and retirement.
• Design, develop, and maintain standard operating system images, application deployment packages, security baselines, and endpoint configurations.
• Oversee enterprise software distribution, patch management, and operating system upgrade initiatives.
• Monitor endpoint health, compliance, and performance metrics, identifying trends and implementing corrective actions.
• Develop and maintain endpoint management standards, policies, and best practices.

Security & Compliance

• Partner with Information Security teams to implement endpoint security controls and compliance requirements.
• Ensure proper management of endpoint protection technologies, encryption, vulnerability remediation, and security baselines.
• Support security initiatives utilizing Microsoft Defender, Conditional Access, and Zero Trust principles.
• Maintain compliance with organizational, regulatory, and industry security requirements.

Microsoft Infrastructure Services

• Administer and support Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID, and related Microsoft infrastructure services.
• Collaborate with Microsoft 365 administrators and infrastructure teams to ensure seamless integration between endpoint and cloud services.
• Evaluate emerging Microsoft technologies and recommend solutions that improve operational efficiency and security.
• Partner with Epic, Clinical Applications, Infrastructure, and Information Security teams to develop and maintain endpoint standards that support clinical workflows, workstation performance, application compatibility, and regulatory compliance.

Automation & Operational Excellence

• Develop automation solutions using PowerShell and related technologies.
• Create and maintain operational procedures, technical documentation, and service standards.
• Establish performance metrics and reporting to demonstrate service effectiveness and identify improvement opportunities.
• Lead root-cause analysis efforts and implement sustainable solutions for recurring issues.

Leadership & Team Management

• Provide technical leadership, mentoring, and guidance to Endpoint Services staff.
• Prioritize and oversee team projects, operational activities, and service requests.
• Serve as the escalation point for complex technical issues.
• Promote continuous improvement, professional development, and operational excellence within the team.
• Collaborate with business and technical stakeholders to define endpoint strategies and ensure successful project delivery.

Education

Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.

Experience

• 7+ years of experience managing enterprise endpoint technologies in a large-scale environment.
• 5+ years of experience with Microsoft Endpoint Configuration Manager (MECM/SCCM) and/or Microsoft Intune.
• 3+ years of technical leadership or supervisory experience.

Required Knowledge & Skills

• Advanced knowledge of Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Advanced knowledge of endpoint management technologies.
• Strong experience with Windows 11 Enterprise deployment and management.
• Strong understanding of Active Directory, Microsoft Entra ID, Group Policy, DNS, and DHCP.
• Experience with Microsoft 365 services and endpoint integration.
• Experience with endpoint security, vulnerability management, and compliance controls.
• Advanced PowerShell scripting and automation skills.
• Strong project leadership and organizational skills.
• Excellent written and verbal communication skills.
• Ability to effectively communicate with both technical and non-technical stakeholders.
• Experience creating and maintaining technical documentation.
• Demonstrated mentoring, coaching, and team leadership abilities.

Preferred Qualifications

• Healthcare industry experience, particularly within complex clinical environments.
• Experience supporting and integrating endpoint technologies with Epic client infrastructure and related clinical applications.
• Experience partnering with Epic technical teams to support workstation standards, operating system upgrades, endpoint security initiatives, application deployment strategies, and clinical device management.
• Experience with Imprivata solutions, including Single Sign-On (SSO), badge tap-and-go workflows, and clinical authentication technologies.
• Experience with Windows Autopilot.
• Experience supporting large-scale Windows 11 deployment initiatives.
• Knowledge of healthcare regulatory requirements and security frameworks affecting endpoint management.
• ITIL knowledge and service management experience.

Preferred Certifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Identity and Access Administrator Associate
• Security+ or comparable cybersecurity certification
• ITIL Foundation Certification