The Endpoint Engineer Level II supports Microsoft 365 environments for managed services customers. This role focuses on providing support and configuration for endpoint technologies across physical devices and cloud-hosted desktop platforms. This role supports customers in the Defense Industrial Base with a strong emphasis on compliance with CMMC 2.0 and NIST 800-171.  

The Endpoint Engineer II works alongside more experienced engineers in a managed services environment to ensure secure, compliant, and consistent endpoint management across Windows 11 devices, Windows 365 Cloud PCs, and Azure Virtual Desktops. 

This role will focus on both the ongoing operations of managed services as well as project-based onboarding and adoption. 

Role & Responsibilities:

Endpoint Support & Administration 

• Act as escalation point for Endpoint Engineer I support requests. 

• Configure and manage physical devices, Windows 365 Cloud PCs, and Azure Virtual Desktop environments using: 

• Microsoft Intune 
• Microsoft Endpoint Manager 
• Group Policy and local security policies (as needed) 

• Deploy applications, manage compliance policies, and enforce conditional access and endpoint protection settings. 

• Manage device enrollments, provisioning packages, and configuration profiles. 

• Assist in the application of compliance baselines and security settings aligned with Zero Trust principles. 

Security & Compliance Tasks 

• Support customer alignment with endpoint-related CMMC 2.0 and NIST 800-171 controls (e.g., system configuration, updates, access policies). 

• Monitor Defender for Endpoint alerts and assist with remediation steps under guidance. 

• Apply or verify device compliance policies (encryption, anti-malware, update status). 

• Support the Security Operations team and the Security Program Management organization with endpoint remediation and reporting as required.

Service Delivery & Operations 

• Respond to service requests and incidents in alignment with SLAs and internal escalation paths. 

• Perform new customer onboarding using SOPs such as the Microsoft 365 Baseline component package produced by the Product Development team. 

• Troubleshoot persistent or advanced endpoint issues including profile corruption, policy misapplication, or user provisioning failures. 

• Collaborate with modern workplace and identity teams on cross-cutting access and compliance issues. 

• Document technical issues, solutions, and recurring patterns in internal knowledge base systems. 

• Use Remote Monitoring and Management (RMM) platforms such as NinjaOne and N-Central (N-Able) for: 

• Device status monitoring 
• Script execution 
• Patch compliance tracking 
• Remote troubleshooting 

• Record issues and time spent using internal PSA/ticketing systems. 

Customer Engagement 

• Work directly with customer stakeholders, primarily technical contacts, to resolve routine issues and implement endpoint changes. 

• Participate in onboarding activities for new users, sites, or departments within existing managed customers. 

• Assist with software distribution and application lifecycle support. 

• Help maintain inventory and documentation of all managed endpoints (physical and virtual). 

Team Collaboration 

• Escalate complex issues to more senior endpoint engineering staff or to other teams as necessary after performing troubleshooting. 

• Participate in regular team syncs and ongoing training sessions to stay current on Microsoft 365 features and changes. 

Operational Excellence 

• Follow standard operating procedure (SOP) documents to support customers. Update SOPs where necessary when steps or processes change. 

• User PowerShell or other scripting technologies and frameworks to automate routine management tasks and generate reports. 

• Contribute to reusable scripts and configuration templates for device provisioning and baseline enforcement. 

Competencies / Skills:

• 3–5 years of experience supporting enterprise Windows endpoints in a managed services, enterprise IT, or regulated environment. 

• Deep working knowledge of Microsoft Intune, Endpoint Manager, Windows 365, and Azure Virtual Desktop. 

• Experience configuring compliance and security policies to meet CMMC 2.0 or NIST 800-171 requirements. 

• Proficient in PowerShell for administration and basic automation. 

• Familiarity with RMM tools (e.g., NinjaOne, ConnectWise Automate, N-Able/N-Central) and PSA systems (e.g., ConnectWise Manage, ServiceNow). 

• Strong troubleshooting and escalation management skills. 

• Strong customer service orientation and clear communication skills. 

• U.S. Citizenship required (due to work with defense contractors and ITAR-regulated customers). 

Preferred

• Experience working in a managed services or IT outsourcing environment. 

• Familiarity with compliance-driven IT support (CMMC, NIST 800-171, DFARS 7012). 

• Exposure to scripting tools (PowerShell) for endpoint automation. 

• Hands-on experience with Azure Virtual Desktop or Windows 365. 

• Microsoft 365 Certified: Fundamentals (MS-900) 

• Microsoft 365 Certified: Modern Desktop Administrator Associate (MD-102) 

• CompTIA A+ or Security+