Senior Endpoint Engineer

The Senior Endpoint Engineer is responsible for designing, engineering, and sustaining endpoint management platforms across a large, global enterprise. This role focuses on cloud‑first endpoint strategies, scalable platform design, and long‑term operational durability using tools such as Microsoft Endpoint Configuration Manager (MECM), Microsoft Intune, Windows Autopilot, Jamf, and 1E.The ideal candidate is a senior‑level engineer who operates end‑to‑end—from architectural decisions through operational impact—and who values building systems that scale, last, and reduce long‑term complexity. This role requires strong technical judgment, comfort navigating organizational complexity, and the ability to work independently in a fast‑moving, global environment with minimal oversight.

Responsibilities:

Cloud‑First Endpoint Architecture & Strategy

• Design and evolve cloud‑first endpoint management architectures aligned with modern identity‑centric and Zero Trust principles.

• Lead the transition from legacy, device‑centric management models toward Intune‑first and Autopilot‑driven approaches.

• Establish durable standards and patterns for endpoint enrollment, configuration, compliance, patching, and lifecycle management.

• Evaluate tradeoffs between cloud and on‑prem tooling to ensure solutions are sustainable at global scale.

• Endpoint Engineering & Platform Management

• Engineer, manage, and optimize enterprise endpoint platforms, including: Microsoft Endpoint Configuration Manager (MECM / SCCM), Microsoft Intune, Windows Autopilot, Jamf (macOS management),1E (patching, remediation, experience, automation)

• Design clean, predictable device lifecycle workflows across Windows and macOS.

• Define how platforms work together intentionally (e.g., MECM + Intune co‑management, 1E remediation patterns).

• Troubleshoot and resolve complex endpoint engineering issues across global environments and operating systems.

Provisioning, Patching, & Lifecycle Engineering

• Design scalable provisioning models that minimize imaging, manual touch, and regional variation.

• Engineer patching strategies that support continuous, phased deployment models using MECM, Intune, and 1E.

• Ensure endpoint lifecycle processes are observable, recoverable, and supportable by operations teams.

• Reduce endpoint operational debt through better platform design rather than process workarounds.

Automation & Engineering Discipline

• Develop and maintain PowerShell‑based automation and tooling to enforce intended configuration state.

• Leverage Microsoft Graph API and cloud‑native methods to streamline endpoint management and reporting.

• Treat automation as first‑class engineering artifacts: documented, versioned, and maintainable.

• Eliminate repetitive manual tasks through engineering solutions rather than operational effort.

Collaboration & Cross‑Functional Partnership

• Partner closely with security, identity, infrastructure, and application teams to design endpoint solutions that scale.

• Translate business and security requirements into technically sound, supportable endpoint implementations.

• Represent user experience and operational impact in architectural and policy‑driven discussions.

• Act as a technical bridge between architecture, security intent, and day‑to‑day operations.

Security & Compliance Support

• Collaborate with security teams to implement endpoint controls that are enforceable and usable at scale.

• Support endpoint hardening initiatives while avoiding unnecessary disruption to productivity.

• Help align endpoint security posture with enterprise and regulatory requirements without introducing fragility.

Leadership & Communication

• Serve as a subject matter expert (SME) for enterprise endpoint platforms and design patterns.

• Mentor junior engineers and influence technical direction without relying on formal authority.

• Clearly communicate architectural decisions, tradeoffs, and long‑term impacts to technical and non‑technical stakeholders.

• Drive strategic endpoint initiatives aligned with organizational goals and long‑term platform health.

Work Experience:

• 8+ years of experience in enterprise endpoint engineering.

• Strong hands‑on experience with MECM, Intune, Windows Autopilot, Jamf, and 1E.

• Proven experience designing endpoint solutions for large, global environments with tens of thousands of devices.

• Strong automation experience using PowerShell and cloud‑native tooling.

• Ability to operate independently, manage competing priorities, and navigate complex organizational structures.

• Demonstrated ability to design solutions that balance security, usability, and operational sustainability.

• Experience operating in Fortune‑scale or similarly complex enterprises.

• Microsoft or endpoint‑focused certifications.

• Experience transitioning legacy endpoint models to modern, cloud‑first strategies.

• Deep familiarity with Microsoft Entra‑aligned identity and device management models.

Skills and Knowledge:

• Technical Judgment: Ability to design systems that scale and avoid long‑term operational debt.

• Cloud‑First Mindset: Strong alignment with modern endpoint and identity‑driven management patterns.

• Engineering Discipline: Preference for standards, patterns, and repeatability over one‑off solutions.

• Problem Solving: Ability to resolve ambiguous, complex endpoint challenges.

• Collaboration: Effective partnership across engineering, security, and business teams.

• Communication: Clear articulation of technical decisions and their implications.

Salary: 4,657.55 - 6,653.67 eur gross/month

What Cencora offers

We offer a competitive annual bonus, life insurance from Day 1, a best-in-class health insurance package, and up to 6 fully paid benefit days a year. As a Cencora employee, you have the benefit of our referral bonus scheme, our boundless learning opportunities and our global Employee Assistance Program. We have a wonderful office location in Quadrum, equipped with everything you need for a small break at work and fresh snacks at all times. Become part of our purpose-driven, multicultural team now and help us create healthier futures

Full time

Affiliated Companies:

Affiliated Companies: AmerisourceBergen Services Corporation