Senior Infrastructure Engineer - Endpoint

Job Information

Salary Range: $86,490 - $102,290

The base salary range represents a good faith salary range for this position. This position is eligible for annual incentive pay and has the opportunity for continued salary growth. If you are hired at American Water your base salary compensation will be determined based on factors such as market, geography, skills, education and/or experience. At American Water, we are committed to pay equity. In addition to compensation, you will be offered a comprehensive benefits package including 401(k), Defined Contribution Plan, Employee Stock Purchase Plan, medical, prescription, dental and vision coverage, plus disability, paid time off, life insurance, voluntary benefits, health and wellness programs and much more! 

American Water is also proud to offer employees learning opportunities and work experiences to grow professionally!

Primary Role

This role supports the endpoint environment that underpins the company’s digital workspace by helping to maintain reliable, secure day-to-day operations across end-user compute, identity and access, and virtual desktop services. The Infrastructure Engineer provides hands-on support for endpoint platforms by administering and optimizing unified endpoint management services (device enrollment, configuration profiles, compliance policies, software distribution, automation, reporting, and dashboards) and by supporting virtual desktop infrastructure services (desktop pool operations, image maintenance, patching, onboarding support, and operational troubleshooting). The role also assists with secure access capabilities such as single sign-on (SSO), identity and access management (IAM) integrations, certificate-based access, and secure connectivity/tunneling services, and helps support cloud-hosted desktop platforms through provisioning and access support, updates, and coordination of image-related activities. This position partners closely with the Service Desk, Field Support, Cyber Security, End Users, and other ITS disciplines to troubleshoot issues, coordinate changes, and deliver improvements that enhance performance, security, and user experience. Additionally, the role assists with device lifecycle activities—provisioning and configuration support, testing/validation, and coordination with vendors and field technicians—to deploy profiles, applications, and updates that improve performance, security, and user experience.

Key Accountabilities

• Develop, document, and enforce endpoint and VDI policies, procedures, and technical standards to ensure secure, compliant, and consistent configurations across Windows, macOS, iOS, and Android. Maintain operational runbooks and SOPs (including provisioning, enrollment, patching, software deployment, access controls, and incident response), align standards with Security and audit requirements, and drive adherence through reviews, continuous improvement, and change control.


• Act as an expert in a particular field of knowledge [this may be a business/functional area and/or a particular technology] and provide detailed information and advice as necessary in that specialization to achieve business outcomes.  Develop and/or promote technical solutions which support the business requirements within their area of expertise. Be accountable for
  specific deliverables in relation to software or web development and/or support.  As needed, lead the technical activity within their area of specialization.

Knowledge/Skills

• Working knowledge of Windows, MacOS, iOS and Android environments.


• Understanding of how to mass deploy software or windows images


• Understanding of configurations or installations from SCCM or similar MDM tools.


• Subject matter expertise in Microsoft Systems; including Windows Desktop & Server Operating Systems, Active Directory, System Center and Office365. 


• Planning, designing, and implementing innovative desktop and laptop hardware and software solutions.


• Proven technical experience with Group Policy, asset management, and package deployment tools.


• Defining and executing a continuous-improvement strategy for upgrading and supporting workstation-based operating systems in both a Windows, Linux and IOS computing environment.


• Leading or working on a project team to deliver desktop support services and assisting in defining project scope and limitations.


• Providing technical direction to the Desktop Support and Help Desk teams to solve complex problems.

Experience/Education

• Bachelors' degree in Computer Science, Information Systems, relevant field of Engineering or similar technology field [equivalent work experience will be considered]


• Experience in Endpoint & System Engineering for a highly virtualized, complex enterprise.


• Experience packaging software


• Familiarization with SCCM or similar MDM tools.


• Background in MDM management


• PowerShell, Active Directory and Group Policy/CSP management

Certifications & Licenses

Microsoft MCP/MCSA/MCSE or other related certifications desired

Travel Requirements

As necessary, up to 50 %

Competencies