Senior Endpoint Automation Engineer

Overview Senior Endpoint Automation Engineer Location: Any MSA office in WI, IA, IL, MN or FL Type: Full‑Time | Salaried | Remote/Hybrid/Onsite Based | Flex Time Eligible MSA Professional Services is seeking a Senior Endpoint Automation Engineer to modernize and optimize how technology is delivered and managed across our organization. This role is responsible for designing, automating, securing, and managing MSA’s endpoint ecosystem across on-premises and cloud environments, including Microsoft 365 and Azure. You’ll combine deep endpoint engineering expertise with automation to reduce manual support, standardize device management, and create a better technology experience for MSA employee-owners. From zero-touch provisioning and automated onboarding to endpoint security and lifecycle management, you’ll have the opportunity to identify opportunities, build scalable solutions, and help shape MSA’s endpoint automation strategy. This role can be onsite, hybrid or remote within driving distance of any of our offices in WI, IL, IA, MN or FL. MSA Professional Services is 100% employee-owned , meaning every employee has a direct stake in the success of the company. This ownership mindset drives our collaborative culture, long-term thinking, and commitment to delivering high-quality work for the communities we serve. Come join the ownership team at MSA! Employee Testimonial: "As an employee-owned company (100% ESOP), working at MSA is not just a job. We're genuine co-owners, and this ESOP setup promotes a culture of collaboration and engagement throughout MSA because we all have a direct financial interest as owners." -Project Engineer Transportation, Cedar Rapids Office Responsibilities Endpoint Engineering & Automation Develop and maintain MSA’s endpoint automation strategy, standards, and best practices, including provisioning, configuration, compliance, security, and lifecycle management. Administer and optimize endpoint technologies including Microsoft Intune, Autopilot, MECM/SCCM, PDQ, and JAMF, as applicable. Build and maintain PowerShell scripts, automated workflows, software deployments, patch management, and zero/low-touch solutions for onboarding, offboarding, device refreshes, and user migrations. Security, Governance & Modernization Monitor endpoint health, performance, compliance, and security; troubleshoot complex issues and implement scalable solutions. Partner with MSA’s Security and Data Governance teams to incorporate security, compliance, and governance best practices into endpoint solutions. Research and implement emerging endpoint management and automation technologies that improve security, scalability, efficiency, and employee experience. Technology Partnership & Support Serve as an escalation point and technical resource for complex endpoint, automation, and device management issues. Partner with the Help Desk and business stakeholders to identify recurring challenges and develop automation, self-service, and process improvements. Develop technical documentation, standards, and implementation guides, and provide training to employees within and outside of IT as appropriate. Project Leadership Identify and lead projects that modernize MSA’s endpoint infrastructure, security, software, and automation capabilities. Collaborate with IT and business stakeholders to establish project requirements, priorities, and solutions while communicating progress throughout implementation. Lead technology modernization efforts and support organizational adoption, including after-hours maintenance, deployments, troubleshooting, and emergency support as needed. Qualifications Education Bachelor of Science degree in Information Science, Computer Science, a related field, or equivalent work experience required Certifications Preferred Microsoft Endpoint Administrator Associate (MD-102) Identity and Access Administrator Associate (SC-300) Experience 10+ years of experience in the Information Technology industry 5+ years of experience in endpoint engineering, desktop systems engineering, or related roles Technical Skills Expert knowledge of Microsoft Intune, MECM/SCCM, Windows Autopilot , and enterprise endpoint management platforms. Advanced knowledge of Windows, Microsoft 365, Entra ID, Active Directory, Group Policy , and endpoint security. Strong PowerShell scripting and automation experience, including software packaging, application deployment, patching, and configuration management. Experience with endpoint security and compliance , including security hardening, lifecycle management, and EDR technologies such as CrowdStrike Falcon. Experience designing zero/low-touch provisioning and automated endpoint processes , including onboarding, offboarding, device refreshes, and user migrations. Experience with Azure Automation, Power Automate , or similar platforms; familiarity with macOS and mobile device management is a plus. Leadership & Collaboration Lead technology modernization initiatives and help drive adoption of new endpoint solutions and processes. Partner effectively with IT, business stakeholders, and leaders at all levels to identify needs and deliver scalable solutions. Work independently while collaborating across teams, taking ownership of priorities, decisions, and outcomes. Demonstrate strong communication, documentation, and knowledge-sharing skills with an eagerness to learn and openness to feedback. Why MSA 100% employee‑owned firm with 100+ years of community impact Collaborative culture with in-house experts for all disciplines across the firm Flexible work‑life integration Ongoing learning and professional growth opportunities for all positions Commitment to fostering a work environment where employees have a strong sense of inclusion and belonging Included on the "ENR Top 500 Design Firms" for over 27 straight years Additional Benefits Eligible employees also receive a comprehensive benefits package, including: Compensation Range: $88,800 - $128,800 (commensurate with experience) Employee Stock Ownership Plan (ESOP) – As a 100% employee-owned company, eligible employees receive company shares at no cost Flex Time : Work 42 hours this week? Have 2 hours added to your Flex Time balance to use as time off in the future 401(k) Retirement Plan – Generous employer match that is immediately 100% vested Medical, Dental & Vision Insurance for employees and eligible dependents Paid Time Off – Minimum of 17 days in the first year Paid Holidays – 8 holidays annually Paid Parental Leave – regardless of birth parent Employer-Paid Insurance – Life, short-term disability, and long-term disability coverage Short-Term Incentive Program (STIP) – Annual performance-based bonus opportunity Equal Opportunity Employer MSA is an Equal Opportunity Employer . All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law . MSA is committed to creating a diverse and inclusive workplace and encourages candidates from all backgrounds to apply. Reasonable Accommodation Statement If you require a reasonable accommodation during the application or interview process, please contact hr@msa-ps.com so we can assist you.