Endpoint Management Engineer

Gillette Children’s is looking for an Endpoint Management Engineer to take strategic and operational ownership of our endpoint management and end-user computing environment. You will design, administer, and continuously improve the platforms that keep our clinicians and staff productive and our devices secure, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. You will also evaluate and adopt new technologies that improve the end-user experience.

This is an onsite based position located in St. Paul, MN. The schedule for the position is Monday-Friday, 8:00am-4:30pm (with some flexibility). On-call expectations once onboarded. The selected candidate can expect to be on-call every 8-10 weeks.

Compensation & Benefits

The annual salary range for this opportunity is $92,497 to $138,736, with a median salary of $115,606/annually. Pay is dependent on several factors including relevant work experience and internal equity. Salary is just one component of the compensation package for employees. Gillette supports career progression and offers a competitive benefits package, including a retirement saving match, tuition and certification reimbursement, paid time off, and health and wellness benefits for .5 FTE and above.

Primary Job Responsibilities

You’ll work closely with Security, Infrastructure, Networking, Clinical Applications, service desk, desktop support, and you’ll be the senior technical escalation point for enterprise-wide endpoint issues.

• Strategy and planning: Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned to clinical and business workflows. Take part in budgeting and lifecycle planning for endpoint hardware and software.
• Patching and security: Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods. Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
• Deployment and packaging: Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android. Set packaging standards, manage the software catalog and licensing compliance, and run changes through change management with testing and rollback planning.
• Escalation and root cause analysis: Own enterprise-wide endpoint incidents from start to finish. Use event logs, endpoint telemetry, Intune reporting, and OS diagnostics to find root causes, coordinate resolution across IT teams, and put long-term fixes in place.
• Automation and reporting: Replace manual processes with scripting, automation, and self-service. Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
• Documentation and audit: Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.

Qualifications

Required

• Bachelor's degree in computer science, MIS, Business Administration, Information Technology or a minimum of 4 years of equivalent experience.
• Experience with enterprise-wide information systems.
• Proficiency in system implementation, support, and maintenance within an IT environment.
• Experience with documentation and version control of system configurations, user guides, and standard operating procedures.
• Deep experience with scripting and automation.

Knowledge, Skills and Abilities

• Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement processes.
• Advanced knowledge of endpoint management platforms and technologies, including Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
• Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
• Strong experience with endpoint configuration management, operating system imaging, application deployment, and software packaging.
• Demonstrated ability to automate endpoint administration and operational processes using scripting and other automation technologies.
• Experience managing enterprise endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
• Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
• Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
• Strong understanding of change management, testing, validation, and release management practices.
• Proven ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
• Experience serving as a technical escalation resource and collaborating effectively with support, infrastructure, security, and application teams.
• Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
• Strong understanding of business processes and the ability to align endpoint solutions with operational needs.
• Knowledge of healthcare technology environments and applicable regulations, including HIPAA, and other healthcare compliance standards.
• Excellent analytical, organizational, problem-solving, and decision-making skills.
• Excellent verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
• Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.

Preferred

• MBA, or related master’s degree.
• Previous experience working in a hospital setting.

At Gillette Children’s, we foster a culture where every team member feels a sense of belonging and purpose. We are dedicated to building an environment where all feel welcomed, respected, and supported. Our values are embedded at the heart of our culture. We act first from love, embrace the bigger picture, and work side-by-side with our patients, families, and colleagues to help every child create their own story. Together, we work to ensure patients of all backgrounds and abilities reach their full potential.

Gillette Children's is an equal opportunity employer and will not discriminate against any employee or applicant for employment because of an individual's race, color, creed, sex, religion, national origin, age, disability, marital status, familial status, genetic information, status with regard to public assistance, sexual orientation or gender identity, military status or any other class protected by federal, state or local laws.

Gillette Children’s is a global beacon of care for patients with brain, bone and movement conditions that start in childhood. Our research, treatment and supportive technologies enable every child to lead a full life defined by their dreams, not their diagnoses.

To learn more about working at Gillette Children's, please visit https://www.gillettechildrens.org/careers.

Gillette Children's participates in the U.S. Department of Homeland Security (DHS) E-Verify program which is an internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. If E-Verify cannot confirm that you are authorized to work, Gillette will give you written instructions and an opportunity to contact DHS or the Social Security Administration (SSA) to resolve the issue before Gillette takes any further action. Please visit https://www.e-verify.gov/ for further details regarding e-verify.