Endpoint Management Engineer

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work.

Job Title: Endpoint Management Engineer Reporting To: Manager, End User Computing Work Schedule: Hybrid – Buffalo, NYThe Endpoint Management Engineer is responsible for designing, implementing, and supporting modern endpoint management solutions across both Microsoft GCC-High and Commercial Microsoft 365 tenants. This role serves as a technical expert for Microsoft Intune, Configuration Manager (SCCM), Windows device management, application deployment, compliance, and endpoint security.

The primary focus of the position is engineering scalable, secure, and efficient endpoint management solutions that enhance the end-user experience while meeting regulatory, security, and operational requirements. The engineer will play a key role in the organization's cloud transformation strategy by advancing modern management capabilities while maintaining and optimizing existing SCCM infrastructure.

This role is hybrid based out of our East Aurora, NY offices.

To be considered for the Endpoint Management Engineer role, here's what you'll typically need to bring with you:

• 5+ years of experience administering Microsoft Intune in an enterprise environment.
• 5+ years of experience supporting Microsoft SCCM / Configuration Manager.
• Experience managing Windows endpoints at scale.
• Experience with operating system deployment, application packaging, and software distribution.
• Strong understanding of endpoint security, compliance policies, and device management best practices.
• Experience with PowerShell scripting and automation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.

We would also prefer the Endpoint Management Engineer to have the following skills and experience:

• Experience managing Microsoft Intune within GCC-High environments.
• Experience with Windows Autopilot and Windows Update for Business.
• Knowledge of Microsoft Entra ID, Conditional Access, and Zero Trust principles.
• Experience supporting co-management and workload transitions between SCCM and Intune.
• Experience with Power BI or reporting platforms.
• Familiarity with ServiceNow and ITIL processes.
• Microsoft Certified Endpoint Administrator Associate or equivalent certification.

As a Endpoint Management Engineer, you will: Endpoint Management & Engineering

• Design, deploy, and maintain endpoint management solutions utilizing Microsoft Intune within both GCC-High and Commercial environments.
• Administer and support SCCM infrastructure, including software distribution, operating system deployment, compliance reporting, and patch management.
• Develop and manage configuration profiles, compliance policies, endpoint security policies, and application deployment strategies.
• Support the migration of management workloads from SCCM to Intune while maintaining business continuity.
• Implement and support Windows Autopilot, Windows Update for Business, and modern device provisioning processes.
• Evaluate, test, and deploy new endpoint management technologies and capabilities.

GCC-High & Security Compliance

• Develop endpoint management solutions that align with GCC-High security and compliance requirements.
• Partner with cybersecurity teams to implement secure configurations, endpoint hardening standards, and compliance controls.
• Support Conditional Access, device compliance, BitLocker, credential protection, and endpoint security initiatives.
• Assist with audit readiness and documentation requirements related to regulated environments.

Application & Device Lifecycle Management

• Manage the deployment, packaging, testing, and lifecycle management of enterprise applications.
• Support Windows operating system deployment, upgrades, and feature updates.
• Develop strategies for driver management, hardware lifecycle support, and endpoint standardization.
• Maintain deployment rings, pilot programs, and production rollout strategies for operating system and application updates.

Automation & Process Improvement

• Utilize PowerShell and other automation technologies to improve operational efficiency.
• Develop automation solutions for device provisioning, software deployment, compliance monitoring, and reporting.
• Identify opportunities to reduce manual processes and improve service delivery through automation.
• Create dashboards, reporting, and monitoring solutions that provide visibility into endpoint health and compliance.

Documentation & Knowledge Management

• Develop and maintain technical documentation, engineering standards, operational procedures, and deployment runbooks.
• Create support documentation and knowledge articles for Service Desk and Site Support teams.
• Establish repeatable operational processes that enable consistent support across global locations.
• Conduct knowledge transfer sessions and provide technical guidance to support teams.

Troubleshooting & Support

• Serve as a senior escalation point for complex Intune, SCCM, Autopilot, and endpoint management issues.
• Perform root cause analysis for recurring endpoint management challenges.
• Collaborate with Infrastructure, Security, Networking, Service Desk, and Desktop Support teams to resolve issues.
• Proactively monitor endpoint health, compliance, and deployment success to improve reliability and user satisfaction.

How We Care For You:

• Financial Rewards: great compensation package, bonus opportunities, matching 401k, and the ability to participate in Employee Stock Purchase Plan (select locations), Flexible Spending and Health Savings Accounts
• Work/Life Balance: Flexible paid time off, holidays and parental leave program.
• Health & Welfare: Comprehensive insurance coverage including medical, dental, vision, life, disability, Employee Assistance Plan (“EAP”) and other supplemental benefit coverages.
• Professional Skills Development: Tuition Assistance, mentorship and coaching opportunities, leadership development and other personal growth programs
• Culture: Warm, respectful, family-like environment driven by our 12 core values. Multiple Employee Resource Groups led by our employees, open and welcoming to all.

Salary Range Transparency: Buffalo, NY $120,000.00–$150,000.00 Annually Salary Range Disclaimer The base salary range represents the low and high end of the Moog salary range for this position in the given work location. Actual salaries will vary depending on factors including but not limited to location, experience, and performance. The range(s) listed is just one component of Moog's total compensation package for employees. Other rewards may include annual bonuses, employee stock purchase plan, an open paid time off policy, and many region-specific benefits.

This position requires access to U.S. export-controlled information.

Moog offers an inclusive workplace, and, as such, affirms the right of every person to participate in all aspects of employment based on merit without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. If you are interested in applying for employment and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department via phone at 844-367-5787.

No unsolicited agency submittals please. Agency partners must be invited to participate in a search by our Talent Acquisition Team and have signed terms in place prior to any submittal. Absent compliance with these pre-conditions resumes submitted directly to any Moog Inc. employee or affiliate will not qualify for fee payment, and therefore become the property of Moog Inc.