Endpoint Engineer, Technology & Security (Microsoft Intune)

Location: Los Angeles, California, United States

Base salary: $125,000–$160,000 per year, plus discretionary bonus incentives and benefits.

Company

hirify.global is a global investment manager specializing in alternative investments across credit, equity, and real estate, with more than 1,400 employees and offices in over 25 cities.

What you will do

• Own and continuously improve the modern endpoint management platform using Microsoft Intune, Windows Autopilot, Microsoft Entra ID, and related technologies.
• Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, upgrades, troubleshooting, and retirement.
• Lead the migration from SCCM/MECM and Group Policy-based management to modern, cloud-native endpoint management.
• Design Intune profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.
• Implement endpoint security controls including BitLocker, Microsoft Defender, Windows LAPS, Windows Hello for Business, firewall policies, attack surface reduction rules, and security baselines.
• Serve as the escalation point for complex endpoint issues and participate in incident response, change management, root cause analysis, audits, and modernization projects.

Requirements

• 5+ years of relevant experience in endpoint engineering or a related field.
• Strong troubleshooting skills across Windows OS, device enrollment, endpoint policies, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.
• Experience writing technical documentation and communicating with technical and non-technical stakeholders.
• Bachelor’s degree required.
• Ability to design endpoint environments for scale, reliability, security, and operational simplicity.
• Ability to work independently and collaborate with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams.

Nice to have

• Microsoft endpoint, Azure administration, security, or identity certifications.
• Experience migrating SCCM/GPO environments to Intune and managing Conditional Access, Zero Trust, device compliance, and Microsoft Defender for Endpoint.
• Experience managing Apple Business Manager, macOS, iOS/iPadOS, and Android devices through Intune.
• Experience with enterprise application packaging, Win32, MSI/MSIX, detection rules, dependencies, deployment rings, VPN, Citrix, and line-of-business applications.
• Experience using Microsoft Copilot or Security Copilot for endpoint automation, troubleshooting, reporting, and documentation.

Culture & Benefits

• Collaborative, curious, and inclusive work environment that values diversity of thought.
• Training and career development opportunities.
• Flexible work arrangement associated with the Los Angeles-based position.
• Comprehensive benefits package and discretionary bonus incentives.
• Support for local communities through philanthropic initiatives.