H-1B Visa Endpoint Engineer Jobs
Endpoint Engineer roles sit squarely within H-1B specialty occupation territory, requiring a bachelor's degree in computer science, information systems, or a related field. Employers filing H-1B petitions for this role must certify a prevailing wage through DOL, making companies with active LCA filing history your strongest targets.
See All Endpoint Engineer JobsOverview
Showing 5 of 21+ Endpoint Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Endpoint Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Endpoint Engineer roles.
Get Access To All JobsEndpoint Engineer
10+ months Contract & Extendable
Onsite in Palo Alto, CA
Summary
The Endpoint Engineer is responsible for the design, implementation, and ongoing management of the organization’s device ecosystem. This role focuses on automating the lifecycle of hardware and virtual desktops to ensure a seamless, secure, and "zero-touch" experience for our global workforce. You will serve as the subject matter expert for Apple and Windows management and our cloud desktop infrastructure.
Technical Environment:
- Apple (macOS & iOS): Jamf Pro
- Windows & Android: Microsoft Intune / Endpoint Manager
- Virtual Desktop: Amazon WorkSpaces (AWS)
- Scripting: PowerShell, Bash, Python
Required Qualifications:
- Experience: Minimum 3–5 years in an Endpoint Engineering or MDM-focused role.
- Jamf Mastery: Proven experience managing both macOS and iOS at scale via Jamf Pro.
- Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.
- VDI Expertise: Hands-on experience with Amazon WorkSpaces administration.
- BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).
- Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.
- Identity: Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO.
Education & Certifications:
- Bachelor’s degree in Computer Science, IT, or equivalent professional experience.
- Relevant certifications (e.g., Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner) are a plus.
Key Responsibilities:
1. Unified Endpoint Management (UEM) Daily Operations:
- Perform daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.
- Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.
- Apple Fleet: Architect and maintain the Jamf Pro environment for all macOS and iOS devices. Manage configuration profiles, policies, and patch management.
- Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.
- Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.
- Virtual Desktop Infrastructure (VDI)
- Administer and optimize Amazon WorkSpaces.
- Manage WorkSpaces directories, custom bundles, and image creation/maintenance.
-
Troubleshoot connectivity and performance issues within the AWS ecosystem.
-
Automation & Engineering
- Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs.
- Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment.
-
Implement automated reporting for hardware inventory, license compliance, and security auditing.
-
Security & Compliance
- Enforce endpoint security standards, including FileVault/BitLocker encryption and EDR agent health.
- Partner with Security teams to remediate vulnerabilities across the endpoint fleet.
Best Regards,
Amit
amustafi@divihn.com
Endpoint Engineer
10+ months Contract & Extendable
Onsite in Palo Alto, CA
Summary
The Endpoint Engineer is responsible for the design, implementation, and ongoing management of the organization’s device ecosystem. This role focuses on automating the lifecycle of hardware and virtual desktops to ensure a seamless, secure, and "zero-touch" experience for our global workforce. You will serve as the subject matter expert for Apple and Windows management and our cloud desktop infrastructure.
Technical Environment:
- Apple (macOS & iOS): Jamf Pro
- Windows & Android: Microsoft Intune / Endpoint Manager
- Virtual Desktop: Amazon WorkSpaces (AWS)
- Scripting: PowerShell, Bash, Python
Required Qualifications:
- Experience: Minimum 3–5 years in an Endpoint Engineering or MDM-focused role.
- Jamf Mastery: Proven experience managing both macOS and iOS at scale via Jamf Pro.
- Intune Proficiency: Experience managing Windows environments through Microsoft Endpoint Manager.
- VDI Expertise: Hands-on experience with Amazon WorkSpaces administration.
- BYOD Deployment: Experience deploying and managing a Bring Your Own Device (BYOD) program for personal mobile phones (iOS/Android).
- Advanced Scripting: Ability to write and debug Bash and PowerShell scripts from scratch.
- Identity: Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO.
Education & Certifications:
- Bachelor’s degree in Computer Science, IT, or equivalent professional experience.
- Relevant certifications (e.g., Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner) are a plus.
Key Responsibilities:
1. Unified Endpoint Management (UEM) Daily Operations:
- Perform daily upkeep, system maintenance, and regular patch management for all managed endpoints to ensure security and stability.
- Service Desk Escalation: Serve as the final point of contact and subject matter expert for service desk escalations related to complex endpoint issues.
- Apple Fleet: Architect and maintain the Jamf Pro environment for all macOS and iOS devices. Manage configuration profiles, policies, and patch management.
- Windows & Android: Lead the administration of Microsoft Intune, ensuring robust policy application, security baselines, and application delivery.
- Provisioning: Manage Apple Business Manager (ABM) and Windows Autopilot to deliver a true zero-touch deployment experience.
- Virtual Desktop Infrastructure (VDI)
- Administer and optimize Amazon WorkSpaces.
- Manage WorkSpaces directories, custom bundles, and image creation/maintenance.
-
Troubleshoot connectivity and performance issues within the AWS ecosystem.
-
Automation & Engineering
- Develop and maintain sophisticated scripts in PowerShell and Bash to automate manual tasks and integrate system APIs.
- Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment.
-
Implement automated reporting for hardware inventory, license compliance, and security auditing.
-
Security & Compliance
- Enforce endpoint security standards, including FileVault/BitLocker encryption and EDR agent health.
- Partner with Security teams to remediate vulnerabilities across the endpoint fleet.
Best Regards,
Amit
amustafi@divihn.com
See all Endpoint Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Endpoint Engineer roles.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Endpoint Engineer
Map your skills to SOC codes
Endpoint Engineer roles most commonly file under SOC code 15-1212 (Information Security Analysts) or 15-1244 (Network and Systems Administrators). Check O*NET to confirm which code matches your specific duties before applying, since mismatches trigger RFEs.
Search LCA filings before applying
Use Migrate Mate to filter employers by verified DOL LCA filing history for endpoint or systems security roles. Targeting companies that have filed recently reduces the risk of landing at an employer unfamiliar with H-1B paperwork.
Verify your prevailing wage tier early
Run your target job titles and locations through the OFLC Wage Search to identify Level I through Level IV wage tiers. Knowing your tier upfront helps you evaluate whether an offer meets H-1B compliance thresholds before you reach the negotiation stage.
Prioritize E-Verify enrolled employers
If your F-1 OPT runs through cap-gap, your employer must be enrolled in E-Verify for your authorization to remain valid past your EAD expiration. Confirm enrollment status during the offer stage, not after you've accepted.
Document endpoint tool certifications precisely
USCIS scrutinizes specialty occupation claims for IT operations roles. Certifications in platforms like Microsoft Intune, CrowdStrike, or JAMF strengthen the degree-to-job nexus in your petition by tying technical specialization to the role's requirements.
Clarify petition timing for contract roles
Endpoint Engineers placed through staffing firms or on client-site contracts require the end-client to be named in the H-1B petition. Get the end-client's details in writing before your employer files, since USCIS can issue an RFE or denial if the worksite is undisclosed.
Endpoint Engineer jobs are hiring across the US. Find yours.
Find Endpoint Engineer JobsEndpoint Engineer H-1B Visa: Frequently Asked Questions
Does an Endpoint Engineer role qualify as an H-1B specialty occupation?
Yes, provided the position requires at least a bachelor's degree in a specific technical field such as computer science, information systems, or cybersecurity. Generalist IT support roles can face RFEs if the job description doesn't clearly require specialized degree-level knowledge. Employers strengthen the petition by tying endpoint management duties to degree-specific competencies in the LCA and I-129 support letter.
Which employers actively sponsor H-1B visas for Endpoint Engineers?
Employers in enterprise IT, healthcare, financial services, and defense contracting file heavily for endpoint and systems security roles. Migrate Mate surfaces employers with verified DOL LCA filing history filtered by occupation, so you can see which companies have sponsored roles matching Endpoint Engineer duties rather than relying on job postings that may not reflect actual sponsorship intent.
Can an Endpoint Engineer role be performed remotely while on H-1B status?
Remote work on H-1B requires a certified LCA for every work location, including a home address if you work from home regularly. If your employer shifts you to a new state or a different metro area without filing an amended LCA, they fall out of compliance. Confirm your employer's process for LCA amendments before accepting a remote or hybrid arrangement.
What happens to my H-1B if I change employers to a new endpoint security team?
H-1B portability under AC21 lets you change employers after your petition has been pending for at least 180 days, without losing your place in the queue. Your new employer must file an H-1B transfer petition before you start. USCIS requires the new role to remain in the same or a similar SOC occupation category, so a lateral move within endpoint or systems engineering generally qualifies.
How does the H-1B cap lottery affect Endpoint Engineer hiring timelines?
The H-1B cap opens each April for a fiscal year starting October 1, with registration typically in March. If your employer is not cap-exempt, you'd need to be selected in the lottery and couldn't start until October 1 at the earliest. Employers who are universities, nonprofit research organizations, or affiliated with them are cap-exempt and can file year-round, which expands your options if you're targeting those sectors.
See which Endpoint Engineer employers are hiring and sponsoring visas right now.
Search Endpoint Engineer Jobs