Senior Endpoint Automation Engineer

Job Duties

Responsibilities

Endpoint Engineering & Automation

Develop and maintain MSA’s endpoint automation strategy, standards, and best practices, including provisioning, configuration, compliance, security, and lifecycle management.

Administer and optimize endpoint technologies including Microsoft Intune, Autopilot, MECM/SCCM, PDQ, and JAMF, as applicable.

Build and maintain PowerShell scripts, automated workflows, software deployments, patch management, and zero/low-touch solutions for onboarding, offboarding, device refreshes, and user migrations.

Security, Governance & Modernization

Monitor endpoint health, performance, compliance, and security; troubleshoot complex issues and implement scalable solutions.

Partner with MSA’s Security and Data Governance teams to incorporate security, compliance, and governance best practices into endpoint solutions.

Research and implement emerging endpoint management and automation technologies that improve security, scalability, efficiency, and employee experience.

Technology Partnership & Support

Serve as an escalation point and technical resource for complex endpoint, automation, and device management issues.

Partner with the Help Desk and business stakeholders to identify recurring challenges and develop automation, self-service, and process improvements.

Develop technical documentation, standards, and implementation guides, and provide training to employees within and outside of IT as appropriate.

Project Leadership

Identify and lead projects that modernize MSA’s endpoint infrastructure, security, software, and automation capabilities.

Collaborate with IT and business stakeholders to establish project requirements, priorities, and solutions while communicating progress throughout implementation.

Lead technology modernization efforts and support organizational adoption, including after-hours maintenance, deployments, troubleshooting, and emergency support as needed.

Qualifications

Education

Bachelor of Science degree in Information Science, Computer Science, a related field, or equivalent work experience required

Certifications Preferred

Microsoft Endpoint Administrator Associate (MD-102)

Identity and Access Administrator Associate (SC-300)

Experience

10+ years of experience in the Information Technology industry

5+ years of experience in endpoint engineering, desktop systems engineering, or related roles

Technical Skills

Expert knowledge of Microsoft Intune, MECM/SCCM, Windows Autopilot, and enterprise endpoint management platforms.

Advanced knowledge of Windows, Microsoft 365, Entra ID, Active Directory, Group Policy, and endpoint security.

Strong PowerShell scripting and automation experience, including software packaging, application deployment, patching, and configuration management.

Experience with endpoint security and compliance, including security hardening, lifecycle management, and EDR technologies such as CrowdStrike Falcon.

Experience designing zero/low-touch provisioning and automated endpoint processes, including onboarding, offboarding, device refreshes, and user migrations.

Experience with Azure Automation, Power Automate, or similar platforms; familiarity with macOS and mobile device management is a plus.

Leadership & Collaboration

Lead technology modernization initiatives and help drive adoption of new endpoint solutions and processes.

Partner effectively with IT, business stakeholders, and leaders at all levels to identify needs and deliver scalable solutions.

Work independently while collaborating across teams, taking ownership of priorities, decisions, and outcomes.

Demonstrate strong communication, documentation, and knowledge-sharing skills with an eagerness to learn and openness to feedback.

Why MSA

100% employee‑owned firm with 100+ years of community impact

Collaborative culture with in-house experts for all disciplines across the firm

Flexible work‑life integration

Ongoing learning and professional growth opportunities for all positions

Commitment to fostering a work environment where employees have a strong sense of inclusion and belonging

Included on the "ENR Top 500 Design Firms" for over 27 straight years

Additional Benefits

Eligible employees also receive a comprehensive benefits package, including:

Compensation Range: $97,000–$156,000 (commensurate with experience)

Employee Stock Ownership Plan (ESOP) – As a 100% employee-owned company, eligible employees receive company shares at no cost

Flex Time: Work 42 hours this week? Have 2 hours added to your Flex Time balance to use as time off in the future

401(k) Retirement Plan – Generous employer match that is immediately 100% vested

Medical, Dental & Vision Insurance for employees and eligible dependents

Paid Time Off – Minimum of 17 days in the first year

Paid Holidays – 8 holidays annually

Paid Parental Leave – regardless of birth parent

Employer-Paid Insurance – Life, short-term disability, and long-term disability coverage

Short-Term Incentive Program (STIP) – Annual performance-based bonus opportunity

Equal Opportunity Employer

MSA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

Minimum Education Required

Bachelor of Science degree in Information Science, Computer Science, a related field, or equivalent work experience required

Minimum Experience Required

10+ years of experience in the Information Technology industry; 5+ years of experience in endpoint engineering, desktop systems engineering, or related roles.

Shift

First (Day)

Number of Openings

1

Compensation

$97,000.00 - $156,000.00 / Annually

Postal Code

55107-1835

Job Type

Full Time

Place of Work

Hybrid

Requisition ID

3249

Job Benefits

Eligible employees also receive a comprehensive benefits package, including:

Compensation Range: $97,000–$156,000 (commensurate with experience)

Employee Stock Ownership Plan (ESOP) – As a 100% employee-owned company, eligible employees receive company shares at no cost

Flex Time: Work 42 hours this week? Have 2 hours added to your Flex Time balance to use as time off in the future

401(k) Retirement Plan – Generous employer match that is immediately 100% vested

Medical, Dental & Vision Insurance for employees and eligible dependents

Paid Time Off – Minimum of 17 days in the first year

Paid Holidays – 8 holidays annually

Paid Parental Leave – regardless of birth parent

Employer-Paid Insurance – Life, short-term disability, and long-term disability coverage

Short-Term Incentive Program (STIP) – Annual performance-based bonus opportunity