Endpoint Engineer Jobs
Endpoint Engineer jobs are open across healthcare, finance, government, and enterprise technology, from junior to senior and principal levels, with specializations in device management, security hardening, and unified endpoint management. Find a role that fits from the openings below and apply directly.
Find Endpoint Engineer JobsOverview
Showing 5 of 124+ Endpoint Engineer jobs
About Marvell
Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.
At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.
Your Team, Your Impact
The Staff Endpoint Engineer is a seasoned endpoint expert who ownsthe design, deployment, and support of Marvell's endpoint estate, with Windows and mobile device management as co-primary responsibilities and macOS, enterprise print, VDI, and Linux as secondary responsibilities. Drawing on specialized depth and breadth of expertise, the professional sets endpoint
standards and baselines, drives complex cross-platform initiatives, anticipates and prevents issues, and is recognized as a go-to expert within the endpoint engineering team or department.
Beyond hands-on engineering, the professional applies innovative solutions to complex problems, mentors less-experienced staff, and partners with security, identity, networking, and service delivery to shape how endpoints are managed enterprise-wide. Works independently and receives guidance only in the most complex situations.
What You Can Expect
Primary Platforms: Windows and Mobile
- Design, configure, and maintain Windows endpoint management through SCCM and Intune co-management, including application deployment, OS imaging, and patch management
- Own mobile device management through Intune (iOS and Android), covering MDM and MAM, app protection, enrollment programs (Apple Business Manager, Android Enterprise), and the full device lifecycle across corporate and BYOD
- Lead zero-touch provisioning across the fleet: Windows Autopilot and mobile automated enrollment
- Develop and maintain enterprise application packages (MSI, MSIX, Win32) and mobile application deployments
Secondary Platforms: macOS, Print, VDI, Linux
- Support macOS management through Jamf Pro, including Apple Business Manager enrollment, configuration profiles, and security baselines
- Support and help modernize enterprise print (Printix, MFP fleet, print servers), VDI provisioning and endpoint support, and the Linux endpoint estate (RHEL and Ubuntu; patching, hardening, 802.1x EAP-TLS)
Standards, Security, and Digital Experience
- Set endpoint standards, baselines, and OS lifecycle and patch strategy across platforms, leading with Windows and mobile
- Manage device compliance, conditional access, and security baselines; integrate endpoint security tooling (CrowdStrike Falcon) and support vulnerability posture (Qualys); partner with identity on Okta and Entra
- Use Nexthink (DEX) to proactively detect and resolve endpoint health issues, and define and report endpoint KPIs that drive continuous improvement
Automation, Improvement, and Mentorship
- Automate configuration, remediation, and reporting with PowerShell, and with Bash or Python for macOS and Linux
- Own runbooks, SOPs, and knowledge management; drive continuous service improvement and predict and prevent recurring issues
- Serve as the senior escalation point for complex endpoint issues, and mentor earlier-career engineers as a recognized domain expert
What We're Looking For
- Bachelor's degree in Business, Science, Arts, or a related field and 3-5 years of related professional experience; or a Master's degree and/or PhD with 2-3 years; including substantial hands-on endpoint engineering experience
- Deep, hands-on Windows endpoint engineering with SCCM and Intune co-management (application deployment, OS imaging, patch management)
- Deep, hands-on mobile device management with Intune across MDM and MAM (iOS and Android enrollment, app protection, compliance, lifecycle). Windows and mobile depth are both required; this is a co-primary role, not Windows with light mobile exposure
- Experience with zero-touch provisioning: Windows Autopilot and mobile automated enrollment (Apple ADE, Android Enterprise)
- Proficiency in PowerShell for automation, remediation, and reporting
- Software packaging and deployment for Windows (MSI, MSIX, Win32) and mobile applications
- Experience with Nexthink or a comparable DEX platform
- Solid understanding of Active Directory, Group Policy, endpoint security baselines, and identity-aware access (Conditional Access)
- Working knowledge across the secondary domains (macOS and Jamf, print, VDI, Linux) with the willingness to own them
- Works independently and receives guidance only in the most complex situations; drives complex projects requiring an in-depth evaluation of variable factors to predict problems and recommend innovative solutions; acts as a team lead who coordinates the activities of other team members; leads major incidents; and mentors less-experienced engineers
Preferred Qualifications:
- Microsoft 365 Certified: Administrator Expert (Expert-tier; the senior target for this role), built on the Endpoint Administrator Associate (MD-102) foundation
- Jamf certification (Jamf Certified Tech or Admin); enterprise mobility credentials (Apple Business Manager, Android Enterprise)
- Experience managing a globally distributed Windows and mobile fleet at enterprise scale
- Familiarity with the surrounding stack: ServiceNow (CMDB and ITSM), CrowdStrike Falcon, Okta and Entra, Qualys, and enterprise print (Printix)
- Scripting and automation beyond PowerShell (Bash, Python); mobile threat defense (MTD); VDI (Citrix, VMware Horizon, or Azure Virtual Desktop); RHCSA; CompTIA Security+; ITIL Foundationv4
- Experience supporting semiconductor, manufacturing, lab, or regulated-industry environments
Expected Base Pay Range (USD)
88,110 - 132,000, $ per annumThe successful candidate’s starting base pay will be determined based on job-related skills, experience, qualifications, work location and market conditions. The expected base pay range for this role may be modified based on market conditions.
This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success.Additional Compensation and Benefit Elements
Marvell is committed to providing exceptional, comprehensive benefits that support our employees at every stage - from internship to retirement and through life’s most important moments. Our offerings are built around four key pillars: financial well-being, family support, mental and physical health, and recognition. Highlights include an employee stock purchase plan with a 2-year look back, family support programs to help balance work and home life, robust mental health resources to prioritize emotional well-being, and a recognition and service awards to celebrate contributions and milestones. We look forward to sharing more with you during the interview process.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.
Any applicant who requires a reasonable accommodation during the selection process should contact Marvell HR Helpdesk at TAOps@marvell.com.
Interview Integrity
To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews.
These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.
This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment.
#LI-AR3About Marvell
Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.
At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.
Your Team, Your Impact
The Staff Endpoint Engineer is a seasoned endpoint expert who ownsthe design, deployment, and support of Marvell's endpoint estate, with Windows and mobile device management as co-primary responsibilities and macOS, enterprise print, VDI, and Linux as secondary responsibilities. Drawing on specialized depth and breadth of expertise, the professional sets endpoint
standards and baselines, drives complex cross-platform initiatives, anticipates and prevents issues, and is recognized as a go-to expert within the endpoint engineering team or department.
Beyond hands-on engineering, the professional applies innovative solutions to complex problems, mentors less-experienced staff, and partners with security, identity, networking, and service delivery to shape how endpoints are managed enterprise-wide. Works independently and receives guidance only in the most complex situations.
What You Can Expect
Primary Platforms: Windows and Mobile
- Design, configure, and maintain Windows endpoint management through SCCM and Intune co-management, including application deployment, OS imaging, and patch management
- Own mobile device management through Intune (iOS and Android), covering MDM and MAM, app protection, enrollment programs (Apple Business Manager, Android Enterprise), and the full device lifecycle across corporate and BYOD
- Lead zero-touch provisioning across the fleet: Windows Autopilot and mobile automated enrollment
- Develop and maintain enterprise application packages (MSI, MSIX, Win32) and mobile application deployments
Secondary Platforms: macOS, Print, VDI, Linux
- Support macOS management through Jamf Pro, including Apple Business Manager enrollment, configuration profiles, and security baselines
- Support and help modernize enterprise print (Printix, MFP fleet, print servers), VDI provisioning and endpoint support, and the Linux endpoint estate (RHEL and Ubuntu; patching, hardening, 802.1x EAP-TLS)
Standards, Security, and Digital Experience
- Set endpoint standards, baselines, and OS lifecycle and patch strategy across platforms, leading with Windows and mobile
- Manage device compliance, conditional access, and security baselines; integrate endpoint security tooling (CrowdStrike Falcon) and support vulnerability posture (Qualys); partner with identity on Okta and Entra
- Use Nexthink (DEX) to proactively detect and resolve endpoint health issues, and define and report endpoint KPIs that drive continuous improvement
Automation, Improvement, and Mentorship
- Automate configuration, remediation, and reporting with PowerShell, and with Bash or Python for macOS and Linux
- Own runbooks, SOPs, and knowledge management; drive continuous service improvement and predict and prevent recurring issues
- Serve as the senior escalation point for complex endpoint issues, and mentor earlier-career engineers as a recognized domain expert
What We're Looking For
- Bachelor's degree in Business, Science, Arts, or a related field and 3-5 years of related professional experience; or a Master's degree and/or PhD with 2-3 years; including substantial hands-on endpoint engineering experience
- Deep, hands-on Windows endpoint engineering with SCCM and Intune co-management (application deployment, OS imaging, patch management)
- Deep, hands-on mobile device management with Intune across MDM and MAM (iOS and Android enrollment, app protection, compliance, lifecycle). Windows and mobile depth are both required; this is a co-primary role, not Windows with light mobile exposure
- Experience with zero-touch provisioning: Windows Autopilot and mobile automated enrollment (Apple ADE, Android Enterprise)
- Proficiency in PowerShell for automation, remediation, and reporting
- Software packaging and deployment for Windows (MSI, MSIX, Win32) and mobile applications
- Experience with Nexthink or a comparable DEX platform
- Solid understanding of Active Directory, Group Policy, endpoint security baselines, and identity-aware access (Conditional Access)
- Working knowledge across the secondary domains (macOS and Jamf, print, VDI, Linux) with the willingness to own them
- Works independently and receives guidance only in the most complex situations; drives complex projects requiring an in-depth evaluation of variable factors to predict problems and recommend innovative solutions; acts as a team lead who coordinates the activities of other team members; leads major incidents; and mentors less-experienced engineers
Preferred Qualifications:
- Microsoft 365 Certified: Administrator Expert (Expert-tier; the senior target for this role), built on the Endpoint Administrator Associate (MD-102) foundation
- Jamf certification (Jamf Certified Tech or Admin); enterprise mobility credentials (Apple Business Manager, Android Enterprise)
- Experience managing a globally distributed Windows and mobile fleet at enterprise scale
- Familiarity with the surrounding stack: ServiceNow (CMDB and ITSM), CrowdStrike Falcon, Okta and Entra, Qualys, and enterprise print (Printix)
- Scripting and automation beyond PowerShell (Bash, Python); mobile threat defense (MTD); VDI (Citrix, VMware Horizon, or Azure Virtual Desktop); RHCSA; CompTIA Security+; ITIL Foundationv4
- Experience supporting semiconductor, manufacturing, lab, or regulated-industry environments
Expected Base Pay Range (USD)
88,110 - 132,000, $ per annumThe successful candidate’s starting base pay will be determined based on job-related skills, experience, qualifications, work location and market conditions. The expected base pay range for this role may be modified based on market conditions.
This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success.Additional Compensation and Benefit Elements
Marvell is committed to providing exceptional, comprehensive benefits that support our employees at every stage - from internship to retirement and through life’s most important moments. Our offerings are built around four key pillars: financial well-being, family support, mental and physical health, and recognition. Highlights include an employee stock purchase plan with a 2-year look back, family support programs to help balance work and home life, robust mental health resources to prioritize emotional well-being, and a recognition and service awards to celebrate contributions and milestones. We look forward to sharing more with you during the interview process.All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.
Any applicant who requires a reasonable accommodation during the selection process should contact Marvell HR Helpdesk at TAOps@marvell.com.
Interview Integrity
To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews.
These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.
This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment.
#LI-AR3Endpoint Engineer Jobs by Experience Level
See All 124+ Endpoint Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Endpoint Engineer JobsEndpoint Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Banking & Financial Services
- Insurance
- Investment & Asset Management
- Manufacturing
What Employers Look For
The qualifications that appear most often in endpoint engineer jobs.
- Hands-on experience with Microsoft Intune, SCCM, or Jamf for device management
- Proficiency in PowerShell or Bash scripting for automation and policy deployment
- Understanding of endpoint security principles including EDR tools and patch management
- Experience deploying and managing Windows 10/11 and macOS in enterprise environments
- CompTIA Security+, Microsoft 365 Certified, or equivalent endpoint-relevant certification
- Bachelor's degree in information technology, computer science, or a related field
Tips for Your Endpoint Engineer Job Search
Tailor your resume to endpoint tooling
List the specific endpoint platforms you've administered, such as Microsoft Intune, Jamf, or SCCM, by version and scale. Hiring managers scan for these names immediately, so bury them deep in a skills section and you'll lose the shortlist.
Highlight compliance frameworks you've worked under
Endpoint roles in healthcare, finance, and government often require CIS Benchmarks, NIST, or HIPAA compliance experience. Call out the specific frameworks directly in your work history rather than listing them as generic skills.
Apply early to roles that fit
Migrate Mate lists endpoint engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Target job postings by deployment environment
Filter openings by whether the environment is Windows-only, macOS-only, or mixed. Your resume should mirror that language. A Jamf-heavy background pitched to an Intune-first shop signals a mismatch before the phone screen starts.
Prepare a technical scenario for the interview
Interviewers routinely ask how you'd handle a zero-day patch rollout or a failed policy deployment across thousands of devices. Walk through your actual process, including rollback steps, rather than describing tools in the abstract.
Negotiate scope, not just compensation
Ask exactly how many endpoints you'd own, whether on-call rotation is included, and which teams you'd collaborate with. Endpoint engineering workloads vary dramatically by organization size, and these details shape your day-to-day far more than title does.
Endpoint Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most endpoint engineers?
The companies hiring the most endpoint engineers right now include Trilon, CACI International, and GEICO, with the largest share of openings in Virginia, California, and Texas, based on current listings on Migrate Mate as of September 2026. Demand is strongest in healthcare systems, financial services firms, and large enterprise IT departments managing thousands of managed devices.
How many endpoint engineer jobs are remote?
About 68% of endpoint engineer openings are fully remote or hybrid as of September 2026, though fully on-site roles remain common in regulated industries like government and healthcare. Remote-friendly positions tend to cluster around cloud-first device management work, particularly roles centered on Intune or Jamf administration rather than hands-on hardware provisioning.
How do you become an endpoint engineer?
Start by building a solid foundation in operating system administration, covering both Windows and macOS environments. Earn a recognized certification such as CompTIA Security+ or a Microsoft 365 endpoint credential. Get hands-on with a device management platform like Intune or Jamf through a lab environment or an internship. Move into a helpdesk or desktop support role to gain real-world device troubleshooting experience, then work toward a dedicated endpoint engineering position as your scripting and policy management skills develop.
Can you get hired as an endpoint engineer without much experience?
Yes, entry-level endpoint engineer roles exist, and most expect candidates coming from desktop support, IT operations, or helpdesk backgrounds rather than pure endpoint engineering. Build a home lab running Intune or Jamf in trial mode, document what you configure, and include it in your resume. Certifications compensate for limited commercial experience and signal that you understand endpoint security fundamentals before your first day.
What does the endpoint engineer interview process look like?
Most endpoint engineer interviews follow a recruiter screen, a technical phone interview, and a practical or scenario-based round with the hiring team. The technical stage typically covers device enrollment methods, policy troubleshooting, patch management workflows, and scripting logic. Some employers add a take-home exercise where you write a PowerShell or Bash script to solve a specific device management problem. Final rounds often include a conversation with the IT security or infrastructure team about tooling and environment scale.
Where can I find and apply to endpoint engineer jobs?
You can find and apply to endpoint engineer jobs on Migrate Mate, which lists current openings from across the United States. Find roles that match your experience and tooling background, then apply directly to each listing.
See All 124+ Endpoint Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Endpoint Engineer Jobs