10544 Client Device Engineer

Salary :

$96,550 - 138,061 yearly

Company : Hyundai Autoever America

Job Type : Full Time

Irvine, Ca

Job Description - 10544 Client Device Engineer

10544 – Client Device Engineer
Location – Irvine, CA

PURPOSE:
The Client Device Engineer (Workstation Management Engineer) delivers enterprise-wide endpoint engineering, support, leveraging Microsoft Endpoint Manager (MECM/SCCM), Microsoft Intune, Windows 11, PowerShell scripting, and Virtual Desktop Infrastructure (VDI) solutions. This role focuses heavily on Patch management, automation, compliance, system health analytics, vulnerability remediation, and enhance in end user experience with service excellence.
The Engineer must work independently or collaboratively to manage incidents, participate in projects, and system lifecycle processes while effectively communicating complex technical topics to non-technical audiences. A strong understanding of CIS Benchmarks, vulnerability remediation, and regulatory compliance (including HIPAA, SOX) is critical.

ESSENTIAL FUNCTIONS:
Endpoint Management & Patching

Engineer and maintain Microsoft Endpoint Manager (MECM/SCCM) and strong experience in Intune.
Deploy, manage, and support Windows 11 devices including WIM imaging, Autopilot provisioning, Patch Management, Configuration Profiles, and Compliance Policies.
Support cloud-attached device management and Azure AD Hybrid Join configurations.
Maintain system health, monitor endpoint compliance, and leverage Endpoint Analytics for optimization.

Automation and Scripting

Develop and maintain PowerShell scripts for deployment automation, system reporting, compliance, and endpoint management tasks.
Automate patching, software deployment, compliance reporting, and system health monitoring.

Security, Compliance, and Vulnerability Remediation

Implement and maintain device hardening standards based on CIS Benchmarks.
Remediate security vulnerabilities identified through regular security assessments.
Support and enforce regulatory compliance including HIPAA, SOX, and other applicable policies.
Participate actively in vulnerability management programs, audits, and regulatory assessments.
Software center software testing and release.

Monitoring, Health, and Availability

Ensure endpoint and server system availability, performance, and security through proactive monitoring and remediation.
Monitor ServiceNow ITSM queues to address incidents, changes, and service requests efficiently within SLA targets.
Utilize System Health Analytics and Endpoint Analytics dashboards to identify and fix emerging issues.

ITSM

Log, update, and resolve incidents, changes, and service requests within ServiceNow.
Track service tickets and proactively manage SLA performance and adherence.
Document root cause analyses, solutions, and technical procedures accurately in ServiceNow.

Project Participation and Execution

Participate in project planning, task execution, and post-implementation reviews.
Track software lifecycle (EOL), ensuring timely updates and system migrations.
Identify, document, and implement system changes following Change Control Board (CCB) processes.

File Share and Permissions Management

Manage and troubleshoot file shares, NTFS permissions, and Active Directory security groups.
Audit and optimize file system permissions to ensure data security and access controls.

Strategy Development

Collaborate with technical and leadership teams to introduce technology enhancements, automation, and security improvements.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

REQUIREMENTS:

Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
10-15 years of IT experience focused on endpoint engineering, security hardening, patch management, automation, and compliance.
Advance MECM experience is required.
Strong experience with Active Directory and OU structure along with GPO management.
Strong experience with Windows 10/11 enterprise deployment and support Advanced Microsoft Endpoint Manager (MECM/SCCM) and Microsoft Intune skills
Extensive PowerShell scripting and task automation experience
Advanced ServiceNow incident, change, and request management experience
Deep understanding of CIS hardening standards, vulnerability remediation, and compliance frameworks (HIPAA, SOX)
Experience with System Health Monitoring tools and Endpoint Analytics
Experience with managing file share permissions and access controls in AD environment
Strong project participation, tracking, and designated task execution skills
Ability to explain complex technical concepts to non-technical audiences clearly and effectively coordination and SLA management experience

CERTIFICATIONS

Microsoft Certified: Modern Desktop Administrator Associate

Microsoft Certified: Endpoint Administrator Associate
Microsoft Certified: Security, Compliance, and Identity Fundamentality v4 Certification (preferred)
Microsoft Intune Endpoint Management experience and certificate highly preferred.

LATEST TECHNOLOGIES FOCUSED:

Microsoft Endpoint Manager (MECM/SCCM + Intune)
Windows Auto Patch
Windows 11
PowerShell scripting and automation
Windows Autopilot
Azure Active Directory, Conditional Access
Endpoint Analytics
ServiceNow ITSM
CIS Security Benchmarks and Compliance Management
System Health and Monitoring Tools

Salary Range - $96,550 - $138,061

Original job 10544 Client Device Engineer posted on GrabJobs ©. To flag any issues with this job please use the Report Job button on GrabJobs.

Share Job

Get your Resume Reviewed for Free

Similar Client Device Engineer Jobs in the US

Get your Resume Reviewed for Free

Email address

Why are you reporting this job?

I think it’s a discriminatory or offensive

I think it’s fraudulent or a scam

I think it’s trying to sell something unrelated to the job / it’s asking for money

I think it contains incorrect or broken information

Other

All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.

Setup your job alert:

Frequency

By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime. Skip

10544 Client Device Engineer

Job Description - 10544 Client Device Engineer

Similar Client Device Engineer Jobs in the US

Mobile Apps