Staff Endpoint Engineer Desktop
Santa Clara County, CA - USA
Job Summary
About Marvell
Marvells semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise cloud and AI and carrier architectures our innovative technology is enabling new possibilities.
At Marvell you can affect the arc of individual lives lift the trajectory of entire industries and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation above and beyond fleeting trends Marvell is a place to thrive learn and lead.
Your Team Your Impact
The Staff Endpoint Engineer is a seasoned endpoint expert who ownsthe design deployment and support of Marvells endpoint estate with Windows and mobile device management as co-primary responsibilities and macOS enterprise print VDI and Linux as secondary responsibilities. Drawing on specialized depth and breadth of expertise the professional sets endpoint
standards and baselines drives complex cross-platform initiatives anticipates and prevents issues and is recognized as a go-to expert within the endpoint engineering team or department.
Beyond hands-on engineering the professional applies innovative solutions to complex problems mentors less-experienced staff and partners with security identity networking and service delivery to shape how endpoints are managed enterprise-wide. Works independently and receives guidance only in the most complex situations.
What You Can Expect
Primary Platforms: Windows and Mobile
- Design configure and maintain Windows endpoint management through SCCM and Intune co-management including application deployment OS imaging and patch management
- Own mobile device management through Intune (iOS and Android) covering MDM and MAM app protection enrollment programs (Apple Business Manager Android Enterprise) and the full device lifecycle across corporate and BYOD
- Lead zero-touch provisioning across the fleet: Windows Autopilot and mobile automated enrollment
- Develop and maintain enterprise application packages (MSI MSIX Win32) and mobile application deployments
Secondary Platforms: macOS Print VDI Linux
- Support macOS management through Jamf Pro including Apple Business Manager enrollment configuration profiles and security baselines
- Support and help modernize enterprise print (Printix MFP fleet print servers) VDI provisioning and endpoint support and the Linux endpoint estate (RHEL and Ubuntu; patching hardening 802.1x EAP-TLS)
Standards Security and Digital Experience
- Set endpoint standards baselines and OS lifecycle and patch strategy across platforms leading with Windows and mobile
- Manage device compliance conditional access and security baselines; integrate endpoint security tooling (CrowdStrike Falcon) and support vulnerability posture (Qualys); partner with identity on Okta and Entra
- Use Nexthink (DEX) to proactively detect and resolve endpoint health issues and define and report endpoint KPIs that drive continuous improvement
Automation Improvement and Mentorship
- Automate configuration remediation and reporting with PowerShell and with Bash or Python for macOS and Linux
- Own runbooks SOPs and knowledge management; drive continuous service improvement and predict and prevent recurring issues
- Serve as the senior escalation point for complex endpoint issues and mentor earlier-career engineers as a recognized domain expert
What Were Looking For
- Bachelors degree in Business Science Arts or a related field and 3-5 years of related professional experience; or a Masters degree and/or PhD with 2-3 years; including substantial hands-on endpoint engineering experience
- Deep hands-on Windows endpoint engineering with SCCM and Intune co-management (application deployment OS imaging patch management)
- Deep hands-on mobile device management with Intune across MDM and MAM (iOS and Android enrollment app protection compliance lifecycle). Windows and mobile depth are both required; this is a co-primary role not Windows with light mobile exposure
- Experience with zero-touch provisioning: Windows Autopilot and mobile automated enrollment (Apple ADE Android Enterprise)
- Proficiency in PowerShell for automation remediation and reporting
- Software packaging and deployment for Windows (MSI MSIX Win32) and mobile applications
- Experience with Nexthink or a comparable DEX platform
- Solid understanding of Active Directory Group Policy endpoint security baselines and identity-aware access (Conditional Access)
- Working knowledge across the secondary domains (macOS and Jamf print VDI Linux) with the willingness to own them
- Works independently and receives guidance only in the most complex situations; drives complex projects requiring an in-depth evaluation of variable factors to predict problems and recommend innovative solutions; acts as a team lead who coordinates the activities of other team members; leads major incidents; and mentors less-experienced engineers
Preferred Qualifications:
- Microsoft 365 Certified: Administrator Expert (Expert-tier; the senior target for this role) built on the Endpoint Administrator Associate (MD-102) foundation
- Jamf certification (Jamf Certified Tech or Admin); enterprise mobility credentials (Apple Business Manager Android Enterprise)
- Experience managing a globally distributed Windows and mobile fleet at enterprise scale
- Familiarity with the surrounding stack: ServiceNow (CMDB and ITSM) CrowdStrike Falcon Okta and Entra Qualys and enterprise print (Printix)
- Scripting and automation beyond PowerShell (Bash Python); mobile threat defense (MTD); VDI (Citrix VMware Horizon or Azure Virtual Desktop); RHCSA; CompTIA Security; ITIL Foundationv4
- Experience supporting semiconductor manufacturing lab or regulated-industry environments
Expected Base Pay Range (USD)
88110 - 132000 $ per annumThe successful candidates starting base pay will be determined based on job-related skills experience qualifications work location and market conditions. The expected base pay range for this role may be modified based on market conditions.
This role is eligible to participate in Marvells bonus and equity plans including a new hire equity grant and annual equity refreshers ensuring you are rewarded for your contributions and remain invested in the companys long-term success.Additional Compensation and Benefit Elements
Marvell is committed to providing exceptional comprehensive benefits that support our employees at every stage - from internship to retirement and through lifes most important moments. Our offerings are built around four key pillars: financial well-being family support mental and physical health and recognition. Highlights include an employee stock purchase plan with a 2-year look back family support programs to help balance work and home life robust mental health resources to prioritize emotional well-being and a recognition and service awards to celebrate contributions and milestones. We look forward to sharing more with you during the interview process.All qualified applicants will receive consideration for employment without regard to race color religion sex national origin sexual orientation gender identity disability or protected veteran status.
Any applicant who requires a reasonable accommodation during the selection process should contact Marvell HR Helpdesk at .
Interview Integrity
To support fair and authentic hiring practices candidates are not permitted to use AI tools (such as transcription apps real-time answer generators like ChatGPT or Copilot or automated note-taking bots) during interviews.
These tools must not be used to record assist with or enhance responses in any way. Our interviews are designed to evaluate your individual experience thought process and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.
This position may require access to technology and/or software subject to U.S. export control laws and regulations including the Export Administration Regulations (EAR). As such applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens lawful permanent residents or protected individuals as defined by 8 U.S.C. 1324b(a)(3) all applicants may be subject to an export license review process prior to employment.
#LI-AR3Required Experience:
Staff IC
About Company
Marvell is empowering the global data economy. Whether at the network core or edge, our leadership technologies make it possible for the world’s data to be processed, moved, stored and secured faster and more reliably. With leading intellectual property and deep system-level knowledge ... View more