Senior Endpoint Engineer

Selene Holdings is a multiple-lines business financial services firm with a mortgage servicing company, a loan diligence company, a title company, an insurance brokerage, and a real estate owned company. We have office locations in Dallas, TX, Jacksonville, FL, and Salt Lake City, UT.  Founded in 2007 to address needs in the mortgage industry, Selene strives to provide amazing client and borrower experiences.  A positive attitude coupled with proven creative thinking and actions are all attributes we seek in every one of our employees. If you want to make a difference, then Selene is the place for you!

Position Summary

The Senior Endpoint Engineer is responsible for the design, implementation, administration, security, and lifecycle management of enterprise endpoint technologies supporting Microsoft Windows workstation and server environments. This position provides technical leadership for endpoint management platforms, operating system deployment, software packaging, patch management, configuration management, and endpoint security across an environment of more than 1,000 endpoints.

The Senior Endpoint Engineer works closely with Information Security, Infrastructure, Service Desk, and business stakeholders to maintain secure, stable, and highly available endpoint systems. This role requires advanced troubleshooting skills, strong automation capabilities, and experience managing Microsoft Intune and enterprise Remote Monitoring and Management (RMM) platforms.

Essential Duties and Responsibilities

·    Administer and maintain Microsoft Intune and enterprise endpoint management platforms supporting Windows workstations and servers.

·    Administer and support enterprise RMM solutions (e.g., BigFix, Automox, Ivanti, NinjaOne) or comparable platforms.

·    Administer and support enterprise network monitoring solutions (e.g. SolarWinds, Datadog, LogicMonitor).

·    Manage endpoint environments exceeding 1,000 devices across office, data center, and remote workforce scenarios.

·    Design, build, test, document, and deploy enterprise application packages and software updates.

·    Create and maintain packages using Adobe Enterprise Packages, Adobe Customization Wizard, Microsoft Office Deployment Tool (ODT), Windows Installer (MSI), Orca, PowerShell, batch scripting, and other silent or unattended installation methods.

·    Plan and execute operating system deployments, feature upgrades, application deployments, patching, and endpoint lifecycle activities.

·    Develop automation and remediation scripts using PowerShell and other approved scripting technologies.

·    Implement and maintain endpoint security configurations aligned with organizational requirements and recognized standards, including CIS Benchmarks and DISA STIGs.

·    Configure, manage, and troubleshoot Windows Defender Firewall and other host-based firewall controls.

·    Partner with Information Security to remediate vulnerabilities, address configuration drift, and improve endpoint hardening.

·    Troubleshoot complex Windows issues involving NTFS and share permissions, Group Policy, registry settings, COM and DCOM components, services, drivers, application dependencies, and operating system performance.

·    Analyze and resolve software installation failures, patching errors, upgrade issues, compliance exceptions, and endpoint security concerns.

·    Monitor and report on endpoint health, inventory, compliance, patch status, deployment success, and configuration baselines.

·    Create and maintain technical documentation, standard operating procedures, deployment standards, support runbooks, and system diagrams.

·    Lead or contribute to technology refreshes, operating system migrations, application modernization, endpoint platform improvements, and cloud management initiatives.

·    Collaborate with vendors and internal teams to evaluate, implement, and support endpoint technologies.

·    Serve as an escalation point for complex endpoint incidents and provide technical mentorship to junior engineers and support personnel.

·    Follow established change management and Change Advisory Board procedures before implementing production changes.

·    Participate in an on-call rotation and perform periodic evening or weekend work for planned maintenance, deployments, upgrades, and emergency troubleshooting.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements below are representative of the knowledge, skills, and abilities required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

·    Advanced experience administering Microsoft Intune in an enterprise environment.

·    Experience with RMM platforms such as BigFix, Automox, Ivanti, NinjaOne, or equivalent solutions.

·    Experience managing Microsoft Windows workstation and server environments with more than 1,000 endpoints.

·    Demonstrated expertise in application packaging, software deployment, operating system deployment, patch management, and endpoint lifecycle management.

·    Strong understanding of MSI packaging, MST transforms, silent installation switches, detection logic, dependencies, supersedence, and rollback planning.

·    Proficiency with PowerShell scripting, automation, and systems administration.

·    Knowledge of endpoint security controls, vulnerability remediation, operating system hardening, CIS Benchmarks, and DISA STIGs.

·    Advanced troubleshooting skills involving Windows, Active Directory, Microsoft Entra ID, Group Policy, file permissions, registry settings, services, and COM components.

·    Ability to analyze complex technical issues, assess production risk, and implement sustainable solutions.

·    Excellent written and verbal communication, documentation, teamwork, and customer service skills.

·    Ability to manage multiple priorities and meet deadlines in a fast-paced environment.

Competencies

Adaptability - Adapts to changing business and technical requirements and effectively manages competing priorities.

Business Ethics - Demonstrates integrity, professionalism, accountability, and sound judgment.

Communication - Explains technical concepts clearly to technical and non-technical audiences and produces accurate documentation.

Customer Service - Responds promptly to customer needs while maintaining service quality and professionalism.

Dependability - Takes ownership, follows through on commitments, and consistently delivers reliable results.

Teamwork - Collaborates across teams, shares knowledge, and contributes to a positive work environment.

Technical Excellence - Applies advanced technical expertise, disciplined troubleshooting, and continuous improvement practices.

Education and Experience

·    Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field is preferred.

·    A minimum of five years of progressively responsible enterprise endpoint engineering or endpoint management experience is required.

·    Experience managing Microsoft Intune and Windows environments containing 1,000 or more endpoints is strongly preferred.

·    Equivalent combinations of education, technical training, certifications, and relevant professional experience may be considered.

Technical Skills

·    Microsoft Intune, Windows 11, Windows Server, Active Directory, Microsoft Entra ID, Group Policy, and Microsoft Defender technologies.

·    BigFix, Automox, Ivanti, NinjaOne, or similar RMM and endpoint management solutions.

·    Adobe Enterprise Packages, Adobe Customization Wizard, Microsoft Office Deployment Tool, MSI technologies, Orca, PowerShell, and batch scripting.

·    Host-based firewalls, security baselines, patching, vulnerability remediation, inventory, reporting, and endpoint compliance.

Certificates and Licenses

Microsoft endpoint, Azure, Windows Server, security, or IT service management certifications are preferred but not required. Examples include Microsoft Certified: Endpoint Administrator Associate, Microsoft Certified: Windows Server Hybrid Administrator Associate, Microsoft Certified: Azure Administrator Associate, CompTIA Security+, and ITIL Foundation.

Additional Position Information

Supervisory Responsibilities: None. This position may provide technical mentorship and task leadership.

Travel: Minimal travel may be required.

On-Call and Maintenance: Participation in an on-call rotation and periodic evening or weekend work is required to support planned maintenance windows, upgrades, deployments, and emergency troubleshooting.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. This position works in a typical office and remote work environment with moderate noise levels.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions. The employee is regularly required to sit and use a computer, and may occasionally stand, walk, stoop, kneel, crouch, or lift and move equipment weighing up to 25 pounds. The employee must be able to communicate effectively and read technical documentation and on-screen information.

Why Selene?

Benefits
Selene Finance LP is committed to the total wellbeing of its employees and therefore offers one of the best benefits packages available in the industry today, which includes:

• Paid Time Off (PTO)

• Medical, Dental &Vision

• Employee Assistance Program

• Flexible Spending Account

• Health Savings Account

• Paid Holidays

• Company paid Life Insurance

• Matching 401(k) Plan

The job requirements listed above are representative of the knowledge, skills, and/or abilities required. This job description is not an inclusive list of all duties and responsibilities of this position. Incumbents will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. Selene reserves the right to amend and change responsibilities to meet business and organizational needs.

Privacy Policy - Selene (seleneadvantage.com)