Desktop Engineering & Endpoint Management

Benefits

Additional Information

Our patients are our number one priority! We're committed to giving children back their childhood! Job Posting Title: Desktop Engineering & Endpoint Management Location: Dallas - Hospital Additional Posting Details: Monday - Friday 8:00am - 4:30pm After-hours/weekend work - as needed - (patching, software deployment, vulnerability management) Job Description: This role is a senior, hands-on endpoint engineering position responsible for owning endpoint platforms, inventory accuracy, and endpoint risk management across the organization. Although the role reports into the Help Desk & End User Support Manager, it operates at a senior engineering and platform-ownership level, defining standards, leading modernization efforts, and reducing operational and security risk. Duties/Responsibilities Endpoint Inventory & CMDB Management Own endpoint inventory accuracy and lifecycle management across ServiceNow CMDB, Microsoft Intune, and KACE. - Define authoritative data sources and reconcile discrepancies between systems. - Design and maintain automated CMDB population and lifecycle workflows. - Ensure accurate tracking of device ownership, status, and compliance. - Partner with IT Asset Management, Security, and End User Support to ensure audit readiness and reliable reporting. Endpoint Engineering, Standards & Risk Management - Serve as the technical authority for endpoint configuration and standards. - Design, build, and maintain gold images, including traditional and modern cloud-based builds. - Establish and enforce endpoint security baselines aligned with organizational and industry standards. - Proactively manage endpoint risk related to vulnerabilities, configuration drift, and unsupported platforms. Endpoint Platform Ownership (KACE to Intune) - Act as platform owner for KACE (current state) and Microsoft Intune (future state). - Develop and execute a phased migration strategy from KACE to Intune. - Migrate policies, applications, and patching with minimal end-user disruption. - Reduce tool overlap and establish Intune as the primary endpoint management platform. Patch Management & Compliance - Own patching strategy for Windows, macOS, and third-party applications. - Define patch SLAs based on risk and clinical impact. - Automate patch deployment and compliance reporting. - Partner with Information Security on vulnerability remediation and audits. Modern Endpoint Strategy & Continuous Improvement - Evaluate and recommend modern endpoint management solutions such as Windows Autopilot and cloud-based imaging. - Identify opportunities to automate endpoint processes and improve deployment speed. - Provide technical mentorship and escalation support to End User Support teams. Required Skills/Abilities - 5+ years of experience in endpoint or desktop engineering. - Hands-on experience with Microsoft Intune / Endpoint Manager. - Hands-on experience with KACE. - Strong experience with ServiceNow CMDB population, reconciliation, and lifecycle workflows. - Experience managing Windows 10/11 enterprise environments, application packaging, and patch management. Nice-to-Have Experience - Experience with Absolute for device visibility and recovery. - Experience with Armis for device discovery and risk insight. - Experience managing macOS and iOS/iPadOS devices. - Healthcare or other regulated industry experience. Measures of Success - Accurate and trusted endpoint inventory reflected in ServiceNow CMDB. - Clearly defined and enforced endpoint standards. - Reduced endpoint risk and improved patch compliance. - Successful transition toward an Intune-first endpoint management model. - Faster, more reliable device deployment and refresh cycles. - Reduced escalations and improved End User Support efficiency.