H-1B Visa Endpoint Engineer Jobs
Endpoint Engineer roles sit squarely within H-1B visa specialty occupation territory, requiring a bachelor's degree in computer science, information systems, or a related field. Employers filing H-1B petitions for this role must certify a prevailing wage through DOL, making companies with active LCA filing history your strongest targets.
Find H-1B Visa Endpoint Engineer JobsOverview
Showing 5 of 29+ Endpoint Engineer jobs
See all Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Endpoint Engineer roles.
Get Access To All JobsAt Fried Frank, we're a community of 800 lawyers and 500 business services professionals across New York, Washington, DC, London, Frankfurt, and Brussels. We advise leading corporations, investment funds, and financial institutions on high-stakes M&A, securities, regulatory matters, real estate, and litigation. Our culture is grounded in our core values — excellence, integrity and collaboration — and is designed to foster continuous learning, meaningful mentorship, and lasting professional growth. We are firmly committed to pro bono service and social justice, building on a proud legacy in civil rights. Our inclusive talent strategy is a core part of our broader talent management efforts and we remain steadfast in fostering a workplace where everyone has the opportunity to grow, thrive, and become their best professional and personal selves. Our business services professionals are integral to the firm's success, driving innovation, operational excellence and exceptional client service across all areas of the firm. We offer competitive compensation and a comprehensive benefits package, including comprehensive medical coverage, retirement plans and health and wellness initiatives designed to support your personal and professional wellbeing. We welcome passionate, driven individuals to join us, and be part of a team where you'll be supported, inspired and empowered to build an exceptional career.
Position Summary
We are seeking a highly skilled and motivated Senior Desktop and Endpoint Engineer to join our team. The primary responsibility of this role is to drive the journey of Intune adoption for endpoint management. The ideal candidate will have a strong background in Intune, SCCM, and Azure platforms, with expertise in PowerShell scripting and Power BI reporting.
Duties & Responsibilities:
- Implement and maintain Windows Autopilot enrollment profiles for device provisioning.
- Configure and manage Windows Update for Business policies to control update rings, deferral settings, and patching cadence.
- Promote Windows/Azure Virtual Desktop and Windows 365 Adoption.
- Administer and continuously optimize Microsoft Intune as the primary endpoint management platform, including configuration profiles, compliance policies, and conditional access integration.
- Manage and maintain Patch My PC integrations with Intune to automate third-party application patching and deployment.
- Enforce application whitelisting strategies using ThreatLocker App Control to reduce attack surface and ensure software compliance.
- Implement new features released by Microsoft to enhance endpoint management through cloud adoption.
- Develop PowerShell scripts for efficient management of endpoints on Intune/Azure platform.
- Collaborate with stakeholders to develop cross-platform automation solutions.
- Create PowerShell Auto Remediation Scripts for compliance issues.
- Develop and maintain Power BI dashboards for Windows/Security Compliance.
- Provision and manage virtual desktops with Azure virtual desktop infrastructure.
- Maintain hands-on expertise with Nerdio Manager for Enterprise features including auto-scaling, image management, and scripted actions.
- Stay up to date on the latest Microsoft updates and features.
- Evaluate new features and updates released by Microsoft and develop POCs and use-cases for adoption.
- Stay informed about the latest trends in the domain and engage in continuous learning.
- Maintain Intune Infrastructure.
Qualifications
- 8-10 years of experience in SCCM, Intune, EntraID.
- 4+ years' experience with PowerShell Scripting.
- Strong knowledge of Azure Active Directory.
- Strong knowledge of Azure Platform.
- Demonstrated impact with global teams.
- Knowledge of Systrack is a plus.
- Knowledge of O365 and Microsoft Teams is a significant plus.
Education / Experience:
Bachelor's degree in computer science or Electronics or equivalent combination of education and professional experience required.
At Fried Frank, we're a community of 800 lawyers and 500 business services professionals across New York, Washington, DC, London, Frankfurt, and Brussels. We advise leading corporations, investment funds, and financial institutions on high-stakes M&A, securities, regulatory matters, real estate, and litigation. Our culture is grounded in our core values — excellence, integrity and collaboration — and is designed to foster continuous learning, meaningful mentorship, and lasting professional growth. We are firmly committed to pro bono service and social justice, building on a proud legacy in civil rights. Our inclusive talent strategy is a core part of our broader talent management efforts and we remain steadfast in fostering a workplace where everyone has the opportunity to grow, thrive, and become their best professional and personal selves. Our business services professionals are integral to the firm's success, driving innovation, operational excellence and exceptional client service across all areas of the firm. We offer competitive compensation and a comprehensive benefits package, including comprehensive medical coverage, retirement plans and health and wellness initiatives designed to support your personal and professional wellbeing. We welcome passionate, driven individuals to join us, and be part of a team where you'll be supported, inspired and empowered to build an exceptional career.
Position Summary
We are seeking a highly skilled and motivated Senior Desktop and Endpoint Engineer to join our team. The primary responsibility of this role is to drive the journey of Intune adoption for endpoint management. The ideal candidate will have a strong background in Intune, SCCM, and Azure platforms, with expertise in PowerShell scripting and Power BI reporting.
Duties & Responsibilities:
- Implement and maintain Windows Autopilot enrollment profiles for device provisioning.
- Configure and manage Windows Update for Business policies to control update rings, deferral settings, and patching cadence.
- Promote Windows/Azure Virtual Desktop and Windows 365 Adoption.
- Administer and continuously optimize Microsoft Intune as the primary endpoint management platform, including configuration profiles, compliance policies, and conditional access integration.
- Manage and maintain Patch My PC integrations with Intune to automate third-party application patching and deployment.
- Enforce application whitelisting strategies using ThreatLocker App Control to reduce attack surface and ensure software compliance.
- Implement new features released by Microsoft to enhance endpoint management through cloud adoption.
- Develop PowerShell scripts for efficient management of endpoints on Intune/Azure platform.
- Collaborate with stakeholders to develop cross-platform automation solutions.
- Create PowerShell Auto Remediation Scripts for compliance issues.
- Develop and maintain Power BI dashboards for Windows/Security Compliance.
- Provision and manage virtual desktops with Azure virtual desktop infrastructure.
- Maintain hands-on expertise with Nerdio Manager for Enterprise features including auto-scaling, image management, and scripted actions.
- Stay up to date on the latest Microsoft updates and features.
- Evaluate new features and updates released by Microsoft and develop POCs and use-cases for adoption.
- Stay informed about the latest trends in the domain and engage in continuous learning.
- Maintain Intune Infrastructure.
Qualifications
- 8-10 years of experience in SCCM, Intune, EntraID.
- 4+ years' experience with PowerShell Scripting.
- Strong knowledge of Azure Active Directory.
- Strong knowledge of Azure Platform.
- Demonstrated impact with global teams.
- Knowledge of Systrack is a plus.
- Knowledge of O365 and Microsoft Teams is a significant plus.
Education / Experience:
Bachelor's degree in computer science or Electronics or equivalent combination of education and professional experience required.
See all H-1B Visa Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Endpoint Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Endpoint Engineer
Map your skills to SOC codes
Endpoint Engineer roles most commonly file under SOC code 15-1212 (Information Security Analysts) or 15-1244 (Network and Systems Administrators). Check O*NET to confirm which code matches your specific duties before applying, since mismatches trigger RFEs.
Search LCA filings before applying
Use Migrate Mate to filter employers by verified DOL LCA filing history for endpoint or systems security roles. Targeting companies that have filed recently reduces the risk of landing at an employer unfamiliar with H-1B paperwork.
Verify your prevailing wage tier early
Run your target job titles and locations through the OFLC Wage Search to identify Level I through Level IV wage tiers. Knowing your tier upfront helps you evaluate whether an offer meets H-1B compliance thresholds before you reach the negotiation stage.
Prioritize E-Verify enrolled employers
If your F-1 OPT runs through cap-gap, your employer must be enrolled in E-Verify for your authorization to remain valid past your EAD expiration. Confirm enrollment status during the offer stage, not after you've accepted.
Document endpoint tool certifications precisely
USCIS scrutinizes specialty occupation claims for IT operations roles. Certifications in platforms like Microsoft Intune, CrowdStrike, or JAMF strengthen the degree-to-job nexus in your petition by tying technical specialization to the role's requirements.
Clarify petition timing for contract roles
Endpoint Engineers placed through staffing firms or on client-site contracts require the end-client to be named in the H-1B petition. Get the end-client's details in writing before your employer files, since USCIS can issue an RFE or denial if the worksite is undisclosed.
H-1B Visa Endpoint Engineer: Frequently Asked Questions
Does an Endpoint Engineer role qualify as an H-1B specialty occupation?
Yes, provided the position requires at least a bachelor's degree in a specific technical field such as computer science, information systems, or cybersecurity. Generalist IT support roles can face RFEs if the job description doesn't clearly require specialized degree-level knowledge. Employers strengthen the petition by tying endpoint management duties to degree-specific competencies in the LCA and I-129 support letter.
Which employers actively sponsor H-1B visas for Endpoint Engineers?
Employers in enterprise IT, healthcare, financial services, and defense contracting file heavily for endpoint and systems security roles. Migrate Mate surfaces employers with verified DOL LCA filing history filtered by occupation, so you can see which companies have sponsored roles matching Endpoint Engineer duties rather than relying on job postings that may not reflect actual sponsorship intent.
Can an Endpoint Engineer role be performed remotely while on H-1B status?
Remote work on H-1B requires a certified LCA for every work location, including a home address if you work from home regularly. If your employer shifts you to a new state or a different metro area without filing an amended LCA, they fall out of compliance. Confirm your employer's process for LCA amendments before accepting a remote or hybrid arrangement.
What happens to my H-1B if I change employers to a new endpoint security team?
H-1B portability under AC21 lets you change employers after your petition has been pending for at least 180 days, without losing your place in the queue. Your new employer must file an H-1B transfer petition before you start. USCIS requires the new role to remain in the same or a similar SOC occupation category, so a lateral move within endpoint or systems engineering generally qualifies.
How does the H-1B cap lottery affect Endpoint Engineer hiring timelines?
The H-1B cap opens each April for a fiscal year starting October 1, with registration typically in March. If your employer is not cap-exempt, you'd need to be selected in the lottery and couldn't start until October 1 at the earliest. Employers who are universities, nonprofit research organizations, or affiliated with them are cap-exempt and can file year-round, which expands your options if you're targeting those sectors.