Endpoint Migration Engineer

Key Responsibilities

• Provide onsite technical support for endpoint migration waves including device preparation re-imaging/provisioning cutover user validation and stabilization.
• Validate device inventory and readiness including hardware compatibility TPM SecureBoot firmware/BIOS and other migration prerequisites.
• Configure and troubleshoot Windows Autopilot including device registration profile assignment OOBE Enrollment Status Page (ESP) failed/stalled provisioning wipe/reset and re-provisioning.
• Administer and troubleshoot Microsoft Intune including enrollment profiles device groups application assignments compliance remote actions Intune Management Extension (IME) and Win32 application deployment.
• Troubleshoot application deployment and packaging issues including MSI/EXE PowerShell detection rules dependencies installation failures and logs.
• Support Active Directory onboarding and troubleshoot domain/offline domain join computer objects/OUs DNS domain-controller connectivity secure channel Group Policy and first user sign-in.
• Use PowerShell Event Viewer dsregcmd nltest nslookup ipconfig gpresult and endpoint logs for troubleshooting.
• Install validate and troubleshoot Tanium Client client registration/check-in connectivity and endpoint health.
• Troubleshoot software/application deployments through Tanium including failed package/action execution and deployment-status issues.
• Support CrowdStrike Falcon installation and endpoint health troubleshooting; coordinate platform-level issues with the security team.
• Have working knowledge of Netskope Client and pre-logon/device connectivity and troubleshoot endpoint-side connectivity issues affecting migration or first sign-in.
• Troubleshoot basic endpoint network dependencies including Internet DNS DHCP/IP LAN/Wi-Fi and domain-controller connectivity and escalate network-side issues when required.
• Support SecureBoot/firmware remediation printer configuration drivers/peripherals and local workstation dependencies.
• Validate required applications and endpoint security/management tools after migration and confirm overall user/device readiness.
• Capture logs and error details resolve migration issues where possible and coordinate/escalate with endpoint identity network security and application teams.
• Maintain troubleshooting notes migration procedures and support/runbook updates and provide knowledge transfer during handover.

Required Skills

• Strong hands-on Microsoft Intune administration and troubleshooting.
• Deep hands-on Windows Autopilot OOBE and ESP troubleshooting.
• Strong Windows 10/11 endpoint engineering and troubleshooting.
• Strong Intune Win32 application deployment and IME troubleshooting.
• Hands-on Tanium experience including troubleshooting Tanium client and software/package deployment issues.
• Good Active Directory domain join DNS Group Policy and Windows authentication troubleshooting knowledge.
• Good PowerShell and Windows troubleshooting skills.
• Hands-on enterprise endpoint migration deployment or re-imaging experience.
• Ability to independently troubleshoot onsite and identify when issues require escalation to identity network security or application teams.
• Willingness and ability to travel frequently across client offices/sites throughout the USA.

Good to Have

• CrowdStrike Falcon endpoint deployment and troubleshooting.
• Netskope Client / Netskope SSE and pre-logon connectivity knowledge.
• PSADT / Windows application packaging experience.
• BitLocker TPM SecureBoot printer/peripheral and driver troubleshooting.

Experience

• 8 years of Windows endpoint / EUC engineering experience with strong hands-on experience in Microsoft Intune and Windows Autopilot. Experience supporting enterprise endpoint migrations or large device deployments is preferred.