OPT Endpoint Engineer Jobs
Endpoint Engineer jobs are a strong fit for F-1 OPT students with backgrounds in computer science, information technology, or cybersecurity. Most roles qualify as STEM OPT extensions, giving you up to 36 months of work authorization. Employers in this space regularly sponsor H-1B visas for strong performers.
Find OPT Endpoint Engineer JobsOverview
Showing 5 of 13+ Endpoint Engineer jobs
See all Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Endpoint Engineer roles.
Get Access To All JobsINTRODUCTION
Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.
ABOUT THE JOB
As a valued colleague on our team, you will design and develop moderately complex solutions for information technology (IT) infrastructure environments, including coding, testing, and certifying technology platforms, software, and applications under limited supervision.
THE IMPACT YOU WILL MAKE
The Senior Windows Endpoint Engineer role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:
Endpoint Management:
- Design, implement, and maintain enterprise endpoint management solutions using Microsoft Intune.
- Manage endpoint lifecycle processes including provisioning, deployment, configuration, maintenance, and retirement.
- Develop and maintain device configuration profiles, compliance policies, update rings, and security baselines.
- Support migration and coexistence strategies between Workspace ONE and Microsoft Intune.
Windows Engineering:
- Administer and support Windows 11 enterprise environments.
- Create and manage standardized endpoint configurations and operating system deployment strategies.
- Evaluate new Microsoft endpoint technologies and recommend improvements to the workplace computing environment.
- Provide advanced troubleshooting for complex Windows platform issues.
Automation & Scripting:
- Develop PowerShell automation solutions to improve operational efficiency.
- Create automated remediation, reporting, compliance validation, and deployment processes.
- Use Microsoft Graph APIs to automate endpoint administration, reporting, and device lifecycle activities.
Endpoint Security & Compliance:
- Implement endpoint security standards and compliance controls.
- Manage device compliance policies, encryption, security baselines, and conditional access requirements.
- Partner with cybersecurity teams to remediate vulnerabilities and maintain regulatory compliance.
- Monitor endpoint health, risk, and policy adherence across enterprise device fleets.
Autopilot & Provisioning:
- Design and support Windows Autopilot deployments.
- Troubleshoot enrollment, provisioning, and Enrollment Status Page issues.
- Implement zero-touch deployment and device onboarding strategies.
- Optimize user experience during provisioning and device refresh initiatives.
Advanced Troubleshooting:
- Lead root cause analysis of complex endpoint management and policy deployment issues.
- Troubleshoot Microsoft Intune, MDM, compliance, device registration, and identity integration issues.
- Support Tier 3 escalation activities for endpoint-related incidents and outages.
MINIMUM QUALIFICATIONS
- 2 years of Windows endpoint engineering or endpoint management experience.
- Microsoft Intune administration experience.
- Windows 11 engineering and troubleshooting expertise.
- Experience with Microsoft Graph API.
- Hands-on experience with Windows Autopatch.
- Advanced PowerShell scripting and automation skills.
- Experience managing Configuration Profiles and Compliance Policies.
- Knowledge of Microsoft Entra ID device management.
- Strong understanding of endpoint security and compliance frameworks.
- Experience supporting large enterprise endpoint environments.
- Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.
PREFERRED QUALIFICATIONS
- Bachelor degree or equivalent.
- Workspace ONE administration experience.
- SCCM/MECM experience.
- Windows Autopilot deployment expertise.
- Experience with Conditional Access and Zero Trust initiatives.
- Endpoint analytics and reporting experience.
- Microsoft certifications in Intune, Endpoint Administrator, or related technologies.
- Experience supporting hybrid and cloud-native device management architectures.
COMPENSATION
- Target Pay Range: $123,000.00 - 161,000.00 a year
Internal Job Title: End User Services - Technology Engineering - Senior Associate
LOCATION
For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.
Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.
The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.
INTRODUCTION
Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.
ABOUT THE JOB
As a valued colleague on our team, you will design and develop moderately complex solutions for information technology (IT) infrastructure environments, including coding, testing, and certifying technology platforms, software, and applications under limited supervision.
THE IMPACT YOU WILL MAKE
The Senior Windows Endpoint Engineer role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:
Endpoint Management:
- Design, implement, and maintain enterprise endpoint management solutions using Microsoft Intune.
- Manage endpoint lifecycle processes including provisioning, deployment, configuration, maintenance, and retirement.
- Develop and maintain device configuration profiles, compliance policies, update rings, and security baselines.
- Support migration and coexistence strategies between Workspace ONE and Microsoft Intune.
Windows Engineering:
- Administer and support Windows 11 enterprise environments.
- Create and manage standardized endpoint configurations and operating system deployment strategies.
- Evaluate new Microsoft endpoint technologies and recommend improvements to the workplace computing environment.
- Provide advanced troubleshooting for complex Windows platform issues.
Automation & Scripting:
- Develop PowerShell automation solutions to improve operational efficiency.
- Create automated remediation, reporting, compliance validation, and deployment processes.
- Use Microsoft Graph APIs to automate endpoint administration, reporting, and device lifecycle activities.
Endpoint Security & Compliance:
- Implement endpoint security standards and compliance controls.
- Manage device compliance policies, encryption, security baselines, and conditional access requirements.
- Partner with cybersecurity teams to remediate vulnerabilities and maintain regulatory compliance.
- Monitor endpoint health, risk, and policy adherence across enterprise device fleets.
Autopilot & Provisioning:
- Design and support Windows Autopilot deployments.
- Troubleshoot enrollment, provisioning, and Enrollment Status Page issues.
- Implement zero-touch deployment and device onboarding strategies.
- Optimize user experience during provisioning and device refresh initiatives.
Advanced Troubleshooting:
- Lead root cause analysis of complex endpoint management and policy deployment issues.
- Troubleshoot Microsoft Intune, MDM, compliance, device registration, and identity integration issues.
- Support Tier 3 escalation activities for endpoint-related incidents and outages.
MINIMUM QUALIFICATIONS
- 2 years of Windows endpoint engineering or endpoint management experience.
- Microsoft Intune administration experience.
- Windows 11 engineering and troubleshooting expertise.
- Experience with Microsoft Graph API.
- Hands-on experience with Windows Autopatch.
- Advanced PowerShell scripting and automation skills.
- Experience managing Configuration Profiles and Compliance Policies.
- Knowledge of Microsoft Entra ID device management.
- Strong understanding of endpoint security and compliance frameworks.
- Experience supporting large enterprise endpoint environments.
- Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.
PREFERRED QUALIFICATIONS
- Bachelor degree or equivalent.
- Workspace ONE administration experience.
- SCCM/MECM experience.
- Windows Autopilot deployment expertise.
- Experience with Conditional Access and Zero Trust initiatives.
- Endpoint analytics and reporting experience.
- Microsoft certifications in Intune, Endpoint Administrator, or related technologies.
- Experience supporting hybrid and cloud-native device management architectures.
COMPENSATION
- Target Pay Range: $123,000.00 - 161,000.00 a year
Internal Job Title: End User Services - Technology Engineering - Senior Associate
LOCATION
For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.
Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.
The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.
See all OPT Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Endpoint Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Endpoint Engineer
Lead with STEM OPT eligibility upfront
Mention your STEM OPT eligibility in your resume summary and cover letter. Endpoint Engineer roles almost always fall under STEM-designated fields, so clarifying your 36-month authorization timeline immediately reduces employer hesitation about hiring international candidates.
Target employers with H-1B sponsorship history
Focus your applications on companies that have previously sponsored H-1B visas for IT infrastructure or security engineers. Past sponsorship behavior is the strongest predictor of willingness to sponsor again when your OPT authorization period ends.
Highlight hands-on endpoint management tools
Employers hiring Endpoint Engineers want proven experience with tools like Microsoft Intune, SCCM, or Jamf. Listing specific platforms and the scale at which you managed devices signals job-ready skills that justify the investment of sponsoring your visa.
Earn a relevant certification before applying
Certifications like Microsoft Certified: Endpoint Administrator Associate or CompTIA Security+ directly validate your qualifications. Certified candidates are easier for employers to justify sponsoring because they demonstrate a clear, measurable standard of technical competency in endpoint management.
Frame your OPT timeline around the H-1B calendar
H-1B petitions are filed in April for an October start. When negotiating your start date, structure it so your OPT authorization covers the full gap. Showing employers you understand this timeline reduces perceived risk and demonstrates immigration awareness.
Apply to mid-sized managed service providers
Mid-sized MSPs and IT managed services firms hire Endpoint Engineers regularly and are often more open to OPT candidates than large enterprises. These companies depend on technical talent pipelines and are experienced with work authorization processes for international hires.
Endpoint Engineer OPT: Frequently Asked Questions
Do Endpoint Engineer jobs qualify for the STEM OPT extension?
Yes. Endpoint Engineer roles typically fall under CIP codes related to computer science, information technology, or cybersecurity, all of which are STEM-designated fields. That means eligible F-1 students can extend their OPT authorization from 12 months to 36 months, giving you significantly more time to secure H-1B sponsorship. Confirm your specific degree's CIP code with your DSO before applying.
How do I find Endpoint Engineer jobs that sponsor OPT students?
Migrate Mate is built specifically for F-1 OPT students and surfaces Endpoint Engineer roles from employers open to sponsoring international candidates. Searching through a general job board means manually filtering thousands of listings with no sponsorship signal. Migrate Mate removes that step by focusing the job board on visa-friendly employers from the start.
What is the E-Verify requirement for STEM OPT, and does it affect Endpoint Engineer roles?
For a STEM OPT extension to be approved, your employer must be enrolled in E-Verify. This requirement applies regardless of job title, so it affects Endpoint Engineer positions the same as any other role. Before accepting an offer, confirm the employer's E-Verify enrollment directly with HR. Most established IT firms and MSPs are already enrolled, but smaller employers may not be.
Can I work as an Endpoint Engineer contractor or through a staffing agency on OPT?
Third-party placement arrangements on OPT require careful review. USCIS requires a bona fide employer-employee relationship, which can be difficult to establish when a staffing agency places you at an end client. If you're considering a contract role, confirm with your DSO that the arrangement meets OPT employment requirements before accepting. Direct-hire roles are structurally simpler.
What happens to my OPT status if my Endpoint Engineer job ends?
F-1 OPT students have a 90-day unemployment allowance across the entire OPT period, reduced to 60 days during a STEM OPT extension. If your Endpoint Engineer position ends, you need to report the change to your DSO within 10 days and begin searching for qualifying employment immediately. Exceeding the unemployment limit puts your status at risk, so acting quickly matters.