OPT Endpoint Engineer Jobs
Endpoint Engineer jobs are a strong fit for F-1 OPT students with backgrounds in computer science, information technology, or cybersecurity. Most roles qualify as STEM OPT extensions, giving you up to 36 months of work authorization. Employers in this space regularly sponsor H-1B visas for strong performers.
Find OPT Endpoint Engineer JobsOverview
Showing 5 of 24+ Endpoint Engineer jobs
See all Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Endpoint Engineer roles.
Get Access To All JobsINTRODUCTION
Gillette Children’s is looking for an Endpoint Management Engineer to take strategic and operational ownership of our endpoint management and end-user computing environment. You will design, administer, and continuously improve the platforms that keep our clinicians and staff productive and our devices secure, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. You will also evaluate and adopt new technologies that improve the end-user experience.
ROLE AND RESPONSIBILITIES
This is an onsite based position located in St. Paul, MN. The schedule for the position is Monday-Friday, 8:00am-4:30pm (with some flexibility). On-call expectations once onboarded. The selected candidate can expect to be on-call every 8-10 weeks.
Compensation & Benefits
The annual salary range for this opportunity is $92,497 to $138,736, with a median salary of $115,606/annually. Pay is dependent on several factors including relevant work experience and internal equity. Salary is just one component of the compensation package for employees. Gillette supports career progression and offers a competitive benefits package, including a retirement saving match, tuition and certification reimbursement, paid time off, and health and wellness benefits for .5 FTE and above.
Primary Job Responsibilities
You’ll work closely with Security, Infrastructure, Networking, Clinical Applications, service desk, desktop support, and you’ll be the senior technical escalation point for enterprise-wide endpoint issues.
- Strategy and planning: Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned to clinical and business workflows. Take part in budgeting and lifecycle planning for endpoint hardware and software.
- Patching and security: Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods. Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
- Deployment and packaging: Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android. Set packaging standards, manage the software catalog and licensing compliance, and run changes through change management with testing and rollback planning.
- Escalation and root cause analysis: Own enterprise-wide endpoint incidents from start to finish. Use event logs, endpoint telemetry, Intune reporting, and OS diagnostics to find root causes, coordinate resolution across IT teams, and put long-term fixes in place.
- Automation and reporting: Replace manual processes with scripting, automation, and self-service. Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
- Documentation and audit: Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.
BASIC QUALIFICATIONS
Required
- Bachelor's degree in computer science, MIS, Business Administration, Information Technology or a minimum of 4 years of equivalent experience.
- Experience with enterprise-wide information systems.
- Proficiency in system implementation, support, and maintenance within an IT environment.
- Experience with documentation and version control of system configurations, user guides, and standard operating procedures.
- Deep experience with scripting and automation.
Knowledge, Skills and Abilities
- Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement processes.
- Advanced knowledge of endpoint management platforms and technologies, including Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
- Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
- Strong experience with endpoint configuration management, operating system imaging, application deployment, and software packaging.
- Demonstrated ability to automate endpoint administration and operational processes using scripting and other automation technologies.
- Experience managing enterprise endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
- Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
- Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
- Strong understanding of change management, testing, validation, and release management practices.
- Proven ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
- Experience serving as a technical escalation resource and collaborating effectively with support, infrastructure, security, and application teams.
- Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
- Strong understanding of business processes and the ability to align endpoint solutions with operational needs.
- Knowledge of healthcare technology environments and applicable regulations, including HIPAA, and other healthcare compliance standards.
- Excellent analytical, organizational, problem-solving, and decision-making skills.
- Excellent verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
- Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.
PREFERRED QUALIFICATIONS
- MBA, or related master’s degree.
- Previous experience working in a hospital setting.
At Gillette Children’s, we foster a culture where every team member feels a sense of belonging and purpose. We are dedicated to building an environment where all feel welcomed, respected, and supported. Our values are embedded at the heart of our culture. We act first from love, embrace the bigger picture, and work side-by-side with our patients, families, and colleagues to help every child create their own story. Together, we work to ensure patients of all backgrounds and abilities reach their full potential.
Gillette Children's is an equal opportunity employer and will not discriminate against any employee or applicant for employment because of an individual's race, color, creed, sex, religion, national origin, age, disability, marital status, familial status, genetic information, status with regard to public assistance, sexual orientation or gender identity, military status or any other class protected by federal, state or local laws.
Gillette Children’s is a global beacon of care for patients with brain, bone and movement conditions that start in childhood. Our research, treatment and supportive technologies enable every child to lead a full life defined by their dreams, not their diagnoses.
Gillette Children's participates in the U.S. Department of Homeland Security (DHS) E-Verify program which is an internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. If E-Verify cannot confirm that you are authorized to work, Gillette will give you written instructions and an opportunity to contact DHS or the Social Security Administration (SSA) to resolve the issue before Gillette takes any further action. Please visit https://www.e-verify.gov/ for further details regarding e-verify.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
INTRODUCTION
Gillette Children’s is looking for an Endpoint Management Engineer to take strategic and operational ownership of our endpoint management and end-user computing environment. You will design, administer, and continuously improve the platforms that keep our clinicians and staff productive and our devices secure, including Microsoft Intune, Windows Autopilot, configuration management, compliance, software deployment, patching, and device lifecycle management. You will also evaluate and adopt new technologies that improve the end-user experience.
ROLE AND RESPONSIBILITIES
This is an onsite based position located in St. Paul, MN. The schedule for the position is Monday-Friday, 8:00am-4:30pm (with some flexibility). On-call expectations once onboarded. The selected candidate can expect to be on-call every 8-10 weeks.
Compensation & Benefits
The annual salary range for this opportunity is $92,497 to $138,736, with a median salary of $115,606/annually. Pay is dependent on several factors including relevant work experience and internal equity. Salary is just one component of the compensation package for employees. Gillette supports career progression and offers a competitive benefits package, including a retirement saving match, tuition and certification reimbursement, paid time off, and health and wellness benefits for .5 FTE and above.
Primary Job Responsibilities
You’ll work closely with Security, Infrastructure, Networking, Clinical Applications, service desk, desktop support, and you’ll be the senior technical escalation point for enterprise-wide endpoint issues.
- Strategy and planning: Build and maintain endpoint roadmaps, device standards, and configuration baselines aligned to clinical and business workflows. Take part in budgeting and lifecycle planning for endpoint hardware and software.
- Patching and security: Define and govern enterprise patching, including deployment rings, testing standards, and rollout methods. Partner with Information Security on endpoint controls, compliance policies, security baselines, and vulnerability remediation.
- Deployment and packaging: Maintain automated deployment of operating systems, applications, configurations, and updates for Windows, iOS, and Android. Set packaging standards, manage the software catalog and licensing compliance, and run changes through change management with testing and rollback planning.
- Escalation and root cause analysis: Own enterprise-wide endpoint incidents from start to finish. Use event logs, endpoint telemetry, Intune reporting, and OS diagnostics to find root causes, coordinate resolution across IT teams, and put long-term fixes in place.
- Automation and reporting: Replace manual processes with scripting, automation, and self-service. Build reporting and KPIs for endpoint security, reliability, compliance, and user experience.
- Documentation and audit: Maintain technical documentation, standards, and runbooks, and support endpoint-related audits.
BASIC QUALIFICATIONS
Required
- Bachelor's degree in computer science, MIS, Business Administration, Information Technology or a minimum of 4 years of equivalent experience.
- Experience with enterprise-wide information systems.
- Proficiency in system implementation, support, and maintenance within an IT environment.
- Experience with documentation and version control of system configurations, user guides, and standard operating procedures.
- Deep experience with scripting and automation.
Knowledge, Skills and Abilities
- Strong understanding of endpoint lifecycle management, including provisioning, deployment, configuration, patching, compliance, and retirement processes.
- Advanced knowledge of endpoint management platforms and technologies, including Microsoft Intune, Configuration Manager (SCCM), Group Policy, Windows Autopilot, and modern device management practices.
- Advanced proficiency supporting and managing Windows 11 endpoints, with working knowledge of iOS and Android device management.
- Strong experience with endpoint configuration management, operating system imaging, application deployment, and software packaging.
- Demonstrated ability to automate endpoint administration and operational processes using scripting and other automation technologies.
- Experience managing enterprise endpoint security controls, device compliance policies, vulnerability remediation, and security baselines.
- Knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and identity-driven endpoint management practices.
- Experience with endpoint monitoring, reporting, analytics, inventory management, and performance optimization.
- Strong understanding of change management, testing, validation, and release management practices.
- Proven ability to diagnose, troubleshoot, and resolve complex endpoint and end-user computing issues through root cause analysis.
- Experience serving as a technical escalation resource and collaborating effectively with support, infrastructure, security, and application teams.
- Knowledge of software licensing, application lifecycle management, and enterprise software deployment methodologies.
- Strong understanding of business processes and the ability to align endpoint solutions with operational needs.
- Knowledge of healthcare technology environments and applicable regulations, including HIPAA, and other healthcare compliance standards.
- Excellent analytical, organizational, problem-solving, and decision-making skills.
- Excellent verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
- Ability to work independently, manage multiple priorities, and deliver results in a dynamic environment.
PREFERRED QUALIFICATIONS
- MBA, or related master’s degree.
- Previous experience working in a hospital setting.
At Gillette Children’s, we foster a culture where every team member feels a sense of belonging and purpose. We are dedicated to building an environment where all feel welcomed, respected, and supported. Our values are embedded at the heart of our culture. We act first from love, embrace the bigger picture, and work side-by-side with our patients, families, and colleagues to help every child create their own story. Together, we work to ensure patients of all backgrounds and abilities reach their full potential.
Gillette Children's is an equal opportunity employer and will not discriminate against any employee or applicant for employment because of an individual's race, color, creed, sex, religion, national origin, age, disability, marital status, familial status, genetic information, status with regard to public assistance, sexual orientation or gender identity, military status or any other class protected by federal, state or local laws.
Gillette Children’s is a global beacon of care for patients with brain, bone and movement conditions that start in childhood. Our research, treatment and supportive technologies enable every child to lead a full life defined by their dreams, not their diagnoses.
Gillette Children's participates in the U.S. Department of Homeland Security (DHS) E-Verify program which is an internet-based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. If E-Verify cannot confirm that you are authorized to work, Gillette will give you written instructions and an opportunity to contact DHS or the Social Security Administration (SSA) to resolve the issue before Gillette takes any further action. Please visit https://www.e-verify.gov/ for further details regarding e-verify.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
See all OPT Endpoint Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Endpoint Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Endpoint Engineer
Lead with STEM OPT eligibility upfront
Mention your STEM OPT eligibility in your resume summary and cover letter. Endpoint Engineer roles almost always fall under STEM-designated fields, so clarifying your 36-month authorization timeline immediately reduces employer hesitation about hiring international candidates.
Target employers with H-1B sponsorship history
Focus your applications on companies that have previously sponsored H-1B visas for IT infrastructure or security engineers. Past sponsorship behavior is the strongest predictor of willingness to sponsor again when your OPT authorization period ends.
Highlight hands-on endpoint management tools
Employers hiring Endpoint Engineers want proven experience with tools like Microsoft Intune, SCCM, or Jamf. Listing specific platforms and the scale at which you managed devices signals job-ready skills that justify the investment of sponsoring your visa.
Earn a relevant certification before applying
Certifications like Microsoft Certified: Endpoint Administrator Associate or CompTIA Security+ directly validate your qualifications. Certified candidates are easier for employers to justify sponsoring because they demonstrate a clear, measurable standard of technical competency in endpoint management.
Frame your OPT timeline around the H-1B calendar
H-1B petitions are filed in April for an October start. When negotiating your start date, structure it so your OPT authorization covers the full gap. Showing employers you understand this timeline reduces perceived risk and demonstrates immigration awareness.
Apply to mid-sized managed service providers
Mid-sized MSPs and IT managed services firms hire Endpoint Engineers regularly and are often more open to OPT candidates than large enterprises. These companies depend on technical talent pipelines and are experienced with work authorization processes for international hires.
Endpoint Engineer OPT: Frequently Asked Questions
Do Endpoint Engineer jobs qualify for the STEM OPT extension?
Yes. Endpoint Engineer roles typically fall under CIP codes related to computer science, information technology, or cybersecurity, all of which are STEM-designated fields. That means eligible F-1 students can extend their OPT authorization from 12 months to 36 months, giving you significantly more time to secure H-1B sponsorship. Confirm your specific degree's CIP code with your DSO before applying.
How do I find Endpoint Engineer jobs that sponsor OPT students?
Migrate Mate is built specifically for F-1 OPT students and surfaces Endpoint Engineer roles from employers open to sponsoring international candidates. Searching through a general job board means manually filtering thousands of listings with no sponsorship signal. Migrate Mate removes that step by focusing the job board on visa-friendly employers from the start.
What is the E-Verify requirement for STEM OPT, and does it affect Endpoint Engineer roles?
For a STEM OPT extension to be approved, your employer must be enrolled in E-Verify. This requirement applies regardless of job title, so it affects Endpoint Engineer positions the same as any other role. Before accepting an offer, confirm the employer's E-Verify enrollment directly with HR. Most established IT firms and MSPs are already enrolled, but smaller employers may not be.
Can I work as an Endpoint Engineer contractor or through a staffing agency on OPT?
Third-party placement arrangements on OPT require careful review. USCIS requires a bona fide employer-employee relationship, which can be difficult to establish when a staffing agency places you at an end client. If you're considering a contract role, confirm with your DSO that the arrangement meets OPT employment requirements before accepting. Direct-hire roles are structurally simpler.
What happens to my OPT status if my Endpoint Engineer job ends?
F-1 OPT students have a 90-day unemployment allowance across the entire OPT period, reduced to 60 days during a STEM OPT extension. If your Endpoint Engineer position ends, you need to report the change to your DSO within 10 days and begin searching for qualifying employment immediately. Exceeding the unemployment limit puts your status at risk, so acting quickly matters.