Senior Staff Engineer – Microsoft Intune / SCCM Technologies

SUMMARY/JOB PURPOSE
The Senior Staff Engineer – Client Technology is a senior engineer responsible for the ownership, security, and governance of one or more IT platforms or products. This role utilizes advanced problem-solving techniques, manages ambiguous technical problems and solves issues of a high degree of complexity between interdependent systems.

ESSENTIAL DUTIES/RESPONSIBILITIES:

Product Strategy & Roadmap:

• Own the overarching strategy and execution for assigned IT platforms, tools, and products
• Drive alignment between technology and the business, utilizing a keen understanding of business needs and the interdependencies between products

Product Development & Delivery:

• Utilize conceptual thinking to drive engineering decisions across platforms and solutions
• Pinpoint systemic issues and devise robust, scalable solutions
• Understand and manage interdependencies across systems and environments
• Thoroughly test fixes and enhancements across multiple environments
• Develop and maintain secure, self-documented scripts with error handling and logging

Stakeholder Management & Cross-Functional Collaboration:

• Collaborate cross-functionally to align platform capabilities with business needs
• Meet with customers and incorporate feedback into the product roadmap through multiple means and channels 
• Influence engineering decisions by advocating for stakeholder needs and aligning technical approaches with business priorities

Operational Excellence, Quality & Compliance:

• Drive operational and technical excellence across one or more IT platforms or products
• Document architecture, configurations, and operational procedures
• Make decisions regarding access, permissions, and security controls across systems
• Lead incident response and root cause analysis for high-impact issues
• Contribute to compliance readiness by implementing controls and processes that support audit and regulatory requirements

Subject Matter Expertise:

• Serve as the SME for assigned capabilities, providing technical leadership and guidance
• Mentor and coach junior engineers, fostering technical growth and best practices

SUPERVISORY RESPONSIBILITIES:

• No supervisory responsibilities.

EDUCATION/EXPERIENCE/KNOWLEDGE & SKILLS:

Education:

• Associate degree and 11 years of experience; or
• Bachelor’s degree and 9 years of related experience; or
• Master’s degree and 7 years of related experience; or
• Equivalent combination of education and experience.
• Technical certification may be required

Experience:

• Proven experience owning and securing complex IT platforms and tools
• Demonstrated ability to lead technical projects and mentor junior engineers
• Experience making access and security decisions across enterprise systems
• Strong scripting and automation skills with production-grade code
• Familiarity with IT security frameworks and governance models
• Experience working in Agile environments and using ticketing systems (e.g., JIRA, JSM)

Knowledge, Skills and Abilities:

• Expert-level knowledge in multiple client technology areas and enterprise systems
• Proven ability to lead cross-functional initiatives and drive technical strategy
• Skilled in stakeholder communication, risk assessment, and change management
• Experience developing standards, governance models, and technical roadmaps
• Strong understanding of enterprise architecture and integration patterns
• Can conceptualize new and innovative ways to solve complex business problems
• Expert knowledge of product-centric and agile framework models

Work Environment/Physical Demands:

• Our office is a modern, open-plan space that fosters collaboration and creativity. Teams work closely together, sharing ideas and solutions in a supportive atmosphere. We provide all necessary equipment, including dual monitors and ergonomic chairs, to ensure a comfortable workspace.
• Occasional travel (5–10%)

ESSENTIAL TECHNICAL DUTIES AND RESPONSIBILITIES:

• Administer Microsoft Intune and SCCM enterprise-wide endpoint management systems, ensuring adherence to industry best practices and for security and device management
• Develop and manage GPO policies aligned with CIS benchmarks and security best practices
• Design and implement advanced automation frameworks using PowerShell, Python, and Windows automation tools
• Lead cross-functional initiatives to integrate endpoint management with identity platforms such as Azure AD and Conditional Access

EDUCATION/EXPERIENCE/KNOWLEDGE & SKILLS:

Experience:

• Extensive experience managing endpoint management systems in a Windows/MacOS environment
• Experience using PowerShell, Python, or other scripting languages, and/or Windows automation tools, to enhance and streamline operations in the endpoint environment Knowledge, Skills and Abilities:
• Advanced knowledge of Endpoint Management Systems and their capabilities
• Substantial knowledge of GPO and CIS Benchmark Hardening
• Advanced Knowledge of scripting and automation tools and best practices
• Knowledge of cloud-based identity and access management (e.g., Azure AD, Conditional Access)
• Design and implement advanced automation using Azure Functions 
• Design and implement of advanced PowerApp and LogicApp
• Advanced utilization of Graph API to automate process related to endpoint management
• Experience managing and automating enterprise patching of Operating Systems and applications
• Automation of Intune packaging process
• Experience managing Azure Virtual Desktop and Windows 365

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The base pay range for this position is $149,000 - $212,000 annually. The base pay range may take into account the candidate’s geographic region, which will adjust the pay depending on the specific work location. The base pay offered will take into account the candidate’s geographic region, job-related knowledge, skills, experience and internal equity, among other factors.

In addition to the base salary, as part of our Total Rewards program, Exelixis offers comprehensive employee benefits package, including a 401k plan with generous company contributions, group medical, dental and vision coverage, life and disability insurance, and flexible spending accounts. Employees are also eligible for a discretionary annual bonus program, or if field sales staff, a sales-based incentive plan. Exelixis also offers employees the opportunity to purchase company stock, and receive long-term incentives, 15 accrued vacation days in their first year, 17 paid holidays including a company-wide winter shutdown in December, and up to 10 sick days throughout the calendar year.

DISCLAIMER 
The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification.  It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to the job.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class.