HealthPartners is currently hiring a Modern Endpoint Engineer to join our Infrastructure Deployment Services team. In this role, the individual is responsible for designing, deploying, securing, and managing the enterprise’s modern workplace ecosystem. The position leverages Configuration Manager (on‑prem), Microsoft Endpoint Manager (Intune), Azure Active Directory, and related technologies to deliver reliable application deployment, effective patch management, and a secure, productive end‑user experience.

The role is well suited for a professional who thrives in a fast‑paced enterprise environment and values automation, standardization, and continuous improvement.

This position reports to the Manager of Infrastructure Deployment Services and is part of an eight‑person team that includes a QA Manager, SMS Administrators, Engineers, and an Analyst.

Required Qualifications:

Bachelor’s degree or equivalent professional experienceFour (4) years of experience performing Client Service AdministrationSix (6) years of IT experienceProfessional experience with Microsoft Endpoint Manager (Intune) and Configuration ManagerExpert in troubleshooting device setup, policy conflicts, app deployment, and OS issuesStrong experience providing excellent IT services within IT and to business partners.Familiarity with enterprise collaboration platforms: M365 Apps, OneDrive, TeamsExperience calculating capacity needs.Skilled in large-scale deployment planningBasic network knowledgeAbility to communicate clearly with technical and non‑technical audiences.Excellent documentation skills (SOPs, deployment guides, change records)Strong analytical and troubleshooting skills with a methodical approach.Comprehensive knowledge of both macOS and Windows desktop operating systemsOverall understanding of IT infrastructureGeneral understanding of Service AdministrationAble to be on call 24 x7.

Preferred Qualifications:

Microsoft 365 administration and MS Graph APIDevelop dashboards and reporting (Intune, Defender, Power BI, compliance)Experience with Entra and on-prem AD and hybrid-join environmentsPowerShell scripting with hands‑on experience using the PowerShell App Deployment Toolkit (PSADT)Experience with ServiceNow, Jira, or other ITSM platformsJamf: Apple device management

Hours/Location:

M-F; core business hoursThis role participates in a one‑week on‑call rotation, scheduled approximately every fifth week.This position offers a flexible hybrid work arrangement, combining onsite and remote work.

Responsibilities:

Device & OS ManagementManage and optimize Microsoft Intune / Endpoint Manager policies, configuration profiles, compliance baselines, and app deployments.Administer Windows updates via Windows AutopatchLead OS lifecycle planning, builds, security baselines, and patching strategies.Automation & Operational EfficiencyBuild and maintain automated workflows using PowerShell, Graph API, and Intune management tools.Standardize configurations, implement structured build processes, and leverage automated deployment solutions to minimize operational workload.Security & ComplianceImplement and maintain security baselines and hardening standards (Defender, BitLocker, Conditional Access, Zero Trust principles)Partner with Security teams to identify vulnerabilities, improve posture, and support compliance initiatives.Application ManagementPackage, deploy, and maintain modern applications using Configuration Manager and Intune Win32 app packaging.Troubleshoot application deployment failures and end‑user impact.Support & TroubleshootingFunction as an escalation point for complex endpoint issues.Monitor environment health, perform root-cause analysis, and implement corrective actions.Provide guidance and documentation to support teams and end-users.Collaboration & StrategyWork closely with Infrastructure, Security, and Service Desk teams to deliver a world‑class end-user experience.Contribute to roadmap planning related to endpoint management, device strategy, and modernization initiatives.