Endpoint Management Engineer

Company Overview OpenKyber is a global IT managed services firm that partners with organizations to scale their technology, infrastructure and services to drive specific business outcomes such as digital transformation, innovation, and operational agility. OpenKyber is focused on building an employee-first, performance-based culture and for over 25 years, we have a demonstrated history of supporting category-defining enterprise clients that are growing ahead of the market. The company specializes in providing solutions across Application Services and Consulting, Digital Product Engineering, Digital Workplace Services, Private Cloud Services, AI/Automation, and ServiceNow. OpenKyber culture is built to provide a collaborative, inclusive environment that supports employees and empowers them to reach their full potential. Our seasoned professionals deliver services based on OpenKyber's best practices and service delivery framework. By leveraging our vast knowledge base to execute initiatives, we deliver both short-term and long-term value to our clients and apply continuous service improvement to deliver transformational benefits to IT. With Intelligent Automation, OpenKyber helps businesses further accelerate their IT transformation. The result is a sharper focus on business objectives and a dramatic improvement in employee productivity. Through our key technology partnerships and our people-first approach, OpenKyber continues to deliver industry-leading innovation to our clients. With more than 3,000 employees serving over 200 companies worldwide, we are following our mission of revolutionizing the way IT is deployed.

Job Overview OpenKyber is seeking a Windows Endpoint Engineer (L3) to provide advanced engineering support for Windows device management, configuration, and security across the enterprise. This role is responsible for designing, implementing, and maintaining Windows endpoint configurations using Microsoft Intune , ensuring secure, compliant, and reliable device operations. Our goal is to deliver excellent technical solutions with high-quality engineering standards, strong documentation, and operational excellence. Candidates must be highly skilled in Windows endpoint management, passionate about modern device management, and capable of thriving in a fast-paced and dynamic environment.

Job Title: Windows Endpoint Engineer (L3) Full-time

How you will make an impact

• Manage Windows device enrollment, configuration profiles, and compliance policies in Microsoft Intune .
• Deploy and maintain Win32, MSI, and MSIX applications through Intune, including packaging, testing, and staged rollouts.
• Configure and maintain Windows Autopilot for zero-touch provisioning and streamlined onboarding.
• Implement, validate, and maintain CIS Windows Benchmark and security baseline configurations.
• Troubleshoot and remediate compliance policy violations and configuration drift.
• Manage Windows OS lifecycle including feature updates, quality updates, and Windows 11 migration projects.
• Troubleshoot advanced Windows OS issues including driver conflicts, performance issues, and system instability.
• Migrate legacy Group Policy Objects (GPOs) to modern Intune configuration profiles and troubleshoot policy conflicts.
• Create technical documentation, runbooks, engineering standards, and configuration guides.
• Share knowledge with cross-functional teams and support elevating technical capability across the organization.

What you will need to succeed

• Strong experience managing and engineering Windows endpoints in a large-scale enterprise environment.
• Advanced hands-on experience with Microsoft Intune MDM/MAM , Windows Autopilot, configuration profiles, and compliance policies.
• Ability to package and deploy Win32 applications, including scripting and troubleshooting installation issues.
• Deep understanding of Windows OS internals, registry, device drivers, and security configurations.
• Experience implementing CIS Benchmarks , Windows security baselines, and compliance frameworks.
• Ability to analyze and resolve complex OS, application, and configuration issues with minimal supervision.
• Excellent ability to communicate technical concepts clearly to both technical and non-technical teams.
• Strong documentation, process adherence, and continuous improvement mindset.
• Demonstrated ability to work across teams and manage multiple engineering tasks simultaneously.

Preferred Qualifications 5-7 years of experience in Windows engineering, endpoint management, or enterprise device operations. Microsoft certifications such as MD-102 , MS-102 , or equivalent experience. Strong PowerShell scripting and automation skills. Experience migrating from GPO to Intune or modern management architectures. Familiarity with Windows Update for Business (WUfB), update rings, and OS servicing. Experience collaborating with security teams on compliance, baselines, and hardening initiatives. Knowledge of networking fundamentals (TCP/IP, DNS, DHCP) that impact endpoint connectivity and configuration.

Technologies You Will Work With

• Microsoft Intune / Endpoint Manager
• Windows Autopilot
• Win32 app packaging (Intune package format, PowerShell, detection rules)
• CIS Benchmarks & Security Baselines
• Windows OS (10/11), drivers, and performance tooling
• PowerShell automation & scripting
• Group Policy (GPO) & Configuration Service Providers (CSPs)
• Windows Update for Business (WUfB)
• Azure AD / Entra ID (device and identity management)

Compensation Estimated Pay Range: Exact compensation and offers of employment are dependent on circumstances of each case and will be determined based on job-related knowledge, skills, experience, licenses or certifications, and location.

Our Commitment to Diversity & Inclusion At OpenKyber we strive to create a workplace that reflects the communities we serve and work with, where we all feel empowered to bring our full, authentic selves to work. We know creating a diverse and inclusive culture that champions equity and belonging is not only the right thing to do for ouremployees butis also critical to our continued success. OpenKyber provides equal employment opportunity for all applicants and employees. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, gender, gender identity, marital status, age, disability, veteran status, sexual orientation, national origin, or any other category protected by applicable federal and state law, or local ordinance. OpenKyber also makes reasonable accommodations for disabled applicants and employees. We welcome the unique background, culture, experiences, knowledge, innovation, self-expression and perspectives you can bring to our global community. Our recruitment team is looking forward to meeting you.

For applications and inquiries,