Endpoint Engineer Jobs in California
Endpoint Engineer jobs in California are in strong demand across the state's technology, healthcare, financial services, and defense sectors, with openings at every level from entry-level support technicians through senior endpoint architects. The largest concentrations of hiring are in the San Francisco Bay Area, Los Angeles, and San Diego, where major employers including Apple, Kaiser Permanente, and Northrop Grumman maintain substantial IT operations requiring endpoint expertise. The most sought-after specialties in California include zero-trust endpoint security, Microsoft Intune and JAMF device management, and macOS fleet administration reflecting the state's large enterprise Mac environment. Find a role that fits below and apply directly.
Find Endpoint Engineer JobsOverview
Showing 5 of 11+ Endpoint Engineer jobs
Our Company
Oaktree is a leader among global investment managers specializing in alternative investments, with more than $220 billion in assets under management. The firm emphasizes an opportunistic, value-oriented, and risk-controlled approach to investments in credit, equity, and real estate. The firm has more than 1,400 employees and offices in more than 25 cities worldwide.
We are committed to cultivating an environment that is collaborative, curious, inclusive and honors diversity of thought. Providing training and career development opportunities and emphasizing strong support for our local communities through philanthropic initiatives are essential to our culture.
For additional information, please visit Oaktree’s website at http://www.oaktreecapital.com/
Responsibilities
Oaktree is seeking a highly motivated and technical Endpoint Engineer to support the Information Security team at Oaktree.
Endpoint Management & Engineering
Own and continuously improve the modern endpoint management platform, including Microsoft Intune, Windows Autopilot, Microsoft Entra ID, and related technologies.
Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, OS upgrades, troubleshooting, and retirement.
Lead the transition from SCCM/MECM and Group Policy–based management to modern, cloud-native endpoint management, including decommissioning legacy infrastructure.
Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and operational consistency.
Microsoft Intune & Modern Management
Design, implement, and optimize Intune configuration profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.
Support Microsoft Entra joined, hybrid-joined, co-managed, and cloud-native device management scenarios.
Develop standardized processes for device provisioning, refresh, rebuilds, feature updates, and hardware lifecycle management.
Endpoint Security & Compliance
Implement and maintain endpoint security controls, including BitLocker, Microsoft Defender, Windows LAPS, Windows Hello for Business, firewall policies, attack surface reduction rules, and security baselines.
Configure and monitor compliance policies to ensure devices meet organizational security requirements.
Application & Operating System Management
Package, deploy, test, and support applications using Intune, Win32 app deployment, Microsoft Store, PowerShell, and enterprise software distribution tools.
Plan and execute Windows feature updates and OS migrations, including readiness assessments, pilot deployments, issue remediation, reporting, and production rollouts.
Develop scripts, detection rules, remediation packages, and automation to improve operational efficiency.
Operational Support
Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.
Diagnose and resolve issues using endpoint logs, Intune reporting, Autopilot diagnostics, PowerShell, Event Viewer, SCCM client logs, and Entra device records.
Participate in incident response, change management, root cause analysis, and continuous service improvement.
Documentation & Collaboration
Maintain documentation for endpoint architecture, standards, policies, deployment processes, application packaging, and support procedures.
Partner with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams to deliver endpoint initiatives.
Support audits, compliance efforts, risk assessments, and endpoint modernization projects.
Qualifications
Required Qualifications
5+ years of relevant experience
Strong troubleshooting skills across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.
Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.
Preferred Qualifications
Microsoft certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, Azure Administrator Associate, or related Microsoft security and identity certifications.
Experience migrating from SCCM/GPO-based environments to Microsoft Intune and modern endpoint management.
Experience with Microsoft Entra Conditional Access, device compliance, Zero Trust, and Microsoft Defender for Endpoint.
Experience managing Apple Business Manager, macOS, iOS/iPadOS, and Android devices through Intune.
Experience with enterprise application packaging and deployment, including Win32, MSI/MSIX, detection rules, dependencies, and deployment rings.
Experience supporting Windows Hello for Business, Cloud Kerberos Trust, Universal Print, VPN, virtual desktop/Citrix environments, and line-of-business applications.
Experience using AI-assisted tools (e.g., Microsoft Copilot or Security Copilot) to improve endpoint automation, troubleshooting, reporting, and documentation.
Personal Attributes
Strong endpoint engineering mindset with the ability to design for scale, reliability, security, and operational simplicity.
Ability to modernize legacy endpoint practices while maintaining business continuity.
Strong analytical and troubleshooting skills.
Security-first mindset with practical understanding of user experience and operational supportability.
Ability to work independently while collaborating across multiple technical teams.
Strong documentation discipline and process orientation.
Education
Bachelor’s degree required.
Base Salary
$125,000 - $160,000
In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives, a comprehensive benefits package and a flexible work arrangement. The base salary offered will be commensurate with experience and/or qualifications, industry knowledge and expertise, as well as prior training and education.
Equal Opportunity Employment Policy
Oaktree is committed to diversity and to equal opportunity employment. Oaktree does not make employment decisions on the basis of race, creed, color, ethnicity, national origin, citizenship, religion, sex, sexual orientation, gender identity, gender expression, age, past or present physical or mental disability, HIV status, medical condition as defined by state law (genetic characteristics or cancer), pregnancy, childbirth and related medical conditions, veteran status, military service, marital status, familial status, genetic information, domestic violence victim status or any other classification protected by applicable federal, state and local laws and ordinances. This policy applies to hiring, placement, internal promotions, training, opportunities for advancement, recruitment advertising, transfers, demotions, layoffs, terminations, recruitment advertising, rates of pay and other forms of compensation and all other terms, conditions and privileges of employment. This policy applies to all Oaktree applicants, employees, clients, and contractors. Staff members wishing to report violations or suspected violations of this policy should contact the head of their department or Human Resources.
For positions based in Los Angeles
For those applying for a position in the city of Los Angeles, the firm will consider for employment qualified applicants with a criminal history in a manner consistent with applicable federal, state and local law.
Our Company
Oaktree is a leader among global investment managers specializing in alternative investments, with more than $220 billion in assets under management. The firm emphasizes an opportunistic, value-oriented, and risk-controlled approach to investments in credit, equity, and real estate. The firm has more than 1,400 employees and offices in more than 25 cities worldwide.
We are committed to cultivating an environment that is collaborative, curious, inclusive and honors diversity of thought. Providing training and career development opportunities and emphasizing strong support for our local communities through philanthropic initiatives are essential to our culture.
For additional information, please visit Oaktree’s website at http://www.oaktreecapital.com/
Responsibilities
Oaktree is seeking a highly motivated and technical Endpoint Engineer to support the Information Security team at Oaktree.
Endpoint Management & Engineering
Own and continuously improve the modern endpoint management platform, including Microsoft Intune, Windows Autopilot, Microsoft Entra ID, and related technologies.
Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, OS upgrades, troubleshooting, and retirement.
Lead the transition from SCCM/MECM and Group Policy–based management to modern, cloud-native endpoint management, including decommissioning legacy infrastructure.
Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and operational consistency.
Microsoft Intune & Modern Management
Design, implement, and optimize Intune configuration profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.
Support Microsoft Entra joined, hybrid-joined, co-managed, and cloud-native device management scenarios.
Develop standardized processes for device provisioning, refresh, rebuilds, feature updates, and hardware lifecycle management.
Endpoint Security & Compliance
Implement and maintain endpoint security controls, including BitLocker, Microsoft Defender, Windows LAPS, Windows Hello for Business, firewall policies, attack surface reduction rules, and security baselines.
Configure and monitor compliance policies to ensure devices meet organizational security requirements.
Application & Operating System Management
Package, deploy, test, and support applications using Intune, Win32 app deployment, Microsoft Store, PowerShell, and enterprise software distribution tools.
Plan and execute Windows feature updates and OS migrations, including readiness assessments, pilot deployments, issue remediation, reporting, and production rollouts.
Develop scripts, detection rules, remediation packages, and automation to improve operational efficiency.
Operational Support
Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.
Diagnose and resolve issues using endpoint logs, Intune reporting, Autopilot diagnostics, PowerShell, Event Viewer, SCCM client logs, and Entra device records.
Participate in incident response, change management, root cause analysis, and continuous service improvement.
Documentation & Collaboration
Maintain documentation for endpoint architecture, standards, policies, deployment processes, application packaging, and support procedures.
Partner with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams to deliver endpoint initiatives.
Support audits, compliance efforts, risk assessments, and endpoint modernization projects.
Qualifications
Required Qualifications
5+ years of relevant experience
Strong troubleshooting skills across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.
Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.
Preferred Qualifications
Microsoft certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, Azure Administrator Associate, or related Microsoft security and identity certifications.
Experience migrating from SCCM/GPO-based environments to Microsoft Intune and modern endpoint management.
Experience with Microsoft Entra Conditional Access, device compliance, Zero Trust, and Microsoft Defender for Endpoint.
Experience managing Apple Business Manager, macOS, iOS/iPadOS, and Android devices through Intune.
Experience with enterprise application packaging and deployment, including Win32, MSI/MSIX, detection rules, dependencies, and deployment rings.
Experience supporting Windows Hello for Business, Cloud Kerberos Trust, Universal Print, VPN, virtual desktop/Citrix environments, and line-of-business applications.
Experience using AI-assisted tools (e.g., Microsoft Copilot or Security Copilot) to improve endpoint automation, troubleshooting, reporting, and documentation.
Personal Attributes
Strong endpoint engineering mindset with the ability to design for scale, reliability, security, and operational simplicity.
Ability to modernize legacy endpoint practices while maintaining business continuity.
Strong analytical and troubleshooting skills.
Security-first mindset with practical understanding of user experience and operational supportability.
Ability to work independently while collaborating across multiple technical teams.
Strong documentation discipline and process orientation.
Education
Bachelor’s degree required.
Base Salary
$125,000 - $160,000
In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives, a comprehensive benefits package and a flexible work arrangement. The base salary offered will be commensurate with experience and/or qualifications, industry knowledge and expertise, as well as prior training and education.
Equal Opportunity Employment Policy
Oaktree is committed to diversity and to equal opportunity employment. Oaktree does not make employment decisions on the basis of race, creed, color, ethnicity, national origin, citizenship, religion, sex, sexual orientation, gender identity, gender expression, age, past or present physical or mental disability, HIV status, medical condition as defined by state law (genetic characteristics or cancer), pregnancy, childbirth and related medical conditions, veteran status, military service, marital status, familial status, genetic information, domestic violence victim status or any other classification protected by applicable federal, state and local laws and ordinances. This policy applies to hiring, placement, internal promotions, training, opportunities for advancement, recruitment advertising, transfers, demotions, layoffs, terminations, recruitment advertising, rates of pay and other forms of compensation and all other terms, conditions and privileges of employment. This policy applies to all Oaktree applicants, employees, clients, and contractors. Staff members wishing to report violations or suspected violations of this policy should contact the head of their department or Human Resources.
For positions based in Los Angeles
For those applying for a position in the city of Los Angeles, the firm will consider for employment qualified applicants with a criminal history in a manner consistent with applicable federal, state and local law.
See All 11 Endpoint Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Endpoint Engineer JobsEndpoint Engineer Jobs by City in California
Where California roles are concentrated, by current openings.
Endpoint Engineer Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Insurance
- Technology & Software
- Healthcare & Medical Services
- Consulting & Professional Services
What California Employers Look For
The qualifications that appear most often in endpoint engineer jobs across California.
- CompTIA Security+ or Microsoft Modern Desktop Administrator Associate certification required
- Hands-on experience with endpoint management platforms such as Microsoft Intune or JAMF Pro
- Proficiency in deploying and managing macOS and Windows 10/11 environments at scale
- Experience with endpoint detection and response tools such as CrowdStrike or Microsoft Defender
- Familiarity with zero-trust security frameworks and enterprise identity management solutions
- Strong scripting skills in PowerShell or Bash for automation and endpoint configuration tasks
Endpoint Engineer Jobs in California: Frequently Asked Questions
How do you become an endpoint engineer in California?
There is no state-issued license required to work as an endpoint engineer in California. Most California employers expect candidates to hold vendor-neutral certifications such as CompTIA A+ and Security+, plus vendor-specific credentials from Microsoft or Apple. A bachelor's degree in computer science, information technology, or a related field is commonly preferred, though many California employers will accept an associate degree combined with relevant certifications and demonstrated hands-on experience with enterprise endpoint platforms.
Which companies hire endpoint engineers in California?
Employers hiring endpoint engineers in California right now include Tesla, CRUSOE, and SpaceX, based on current listings on Migrate Mate as of August 2026. California's concentration of large technology headquarters, integrated healthcare systems, and defense contractors means endpoint engineers find consistent openings across a particularly broad range of industries compared to most other states.
Which California cities have the most endpoint engineer jobs?
Irvine, Fresno, and Alameda have the most endpoint engineer openings in California. The San Francisco Bay Area and Los Angeles account for the largest share, driven by the dense clusters of enterprise technology firms, major health systems, and financial institutions headquartered there, while San Diego's significant defense and biotech presence keeps demand steady in that metro as well.
Are there remote endpoint engineer jobs in California?
Yes, but they are less common than in purely analytical roles because endpoint engineering often requires hands-on device provisioning, imaging, and on-site troubleshooting. About 33% of endpoint engineer openings tied to California are remote or hybrid as of August 2026, reflecting a mix of models across employers. The portions of the role most likely to be performed remotely are policy configuration, scripting, and remote-agent management rather than physical hardware deployment.
How can I get hired as an endpoint engineer in California with little or no experience?
The most realistic entry path is starting as an IT help desk technician or desktop support specialist, which large California employers such as Kaiser Permanente, UC system campuses, and major technology firms hire for regularly. From those roles, candidates build direct exposure to endpoint tools and can transition into endpoint engineering within one to two years. Earning a CompTIA A+ and then a Microsoft Intune or JAMF administrator credential while working in a support role gives applicants a measurable edge when applying to endpoint engineer openings in California.
Where can I find and apply to endpoint engineer jobs in California?
You can find and apply to endpoint engineer jobs in California on Migrate Mate, which lists current California openings updated regularly. Search the listings to see roles that match your experience level and preferred location, then apply directly to the ones that fit.
See All 11 Endpoint Engineer Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Endpoint Engineer Jobs