Systems Engineer

Robert Half is seeking a Systems Engineer II to support enterprise endpoint engineering in a regulated financial services environment. This role will be responsible for designing, implementing, maintaining, and securing Windows, macOS, and iOS endpoints across on-premises, cloud-managed, and remote environments.

Key Responsibilities:

• Administer and optimize Tanium as the primary endpoint management and patching platform, including Patch, Deploy, Comply, Asset, and Interact modules
• Lead enterprise patching strategy for Windows, macOS, and third-party applications, including monthly patch cycles, out-of-band releases, zero-day remediation, and feature updates
• Coordinate patch testing, pilot groups, phased deployments, validation, compliance monitoring, and rollback procedures
• Package, test, and deploy applications across Windows, macOS, and iOS using Tanium Deploy and Microsoft Intune
• Manage endpoint provisioning and enrollment for Windows Autopilot, Apple Business Manager, and Intune
• Own Group Policy and Intune policy administration, including configuration profiles, compliance policies, security baselines, endpoint protection, update rings, and conditional access
• Develop and maintain automation for provisioning, software deployment, patch orchestration, endpoint health checks, and reporting using PowerShell, Python, and Bash
• Experience supporting enterprise endpoint environments across Windows, macOS, and iOS
• Strong hands-on expertise with Tanium, Microsoft Intune, and Group Policy
• Experience with software packaging, patch management, endpoint security, and compliance
• Scripting and automation experience with PowerShell, Python, and Bash
• Financial services or other regulated industry experience preferred