Endpoint Systems Engineer

Position Summary
The Endpoint Systems Engineer owns endpoint device management and security across JDA TSG's Windows and MacOS environment. This role is central to the company's SOC 2 compliance program and plays a key part in strengthening how JDA manages its Microsoft 365 environment.
This is a hands-on role covering device enrollment, configuration, patching, and vulnerability remediation, along with working knowledge of Microsoft 365 and Entra ID that adds depth to JDA's broader cloud environment.
Because this is a newly created role, you will help define how JDA manages and secures its endpoint fleet as the company scales, working directly with IT leadership and the SOC 2 compliance program.
Why You'll Love This Role
Own a security-critical function from day one, with influence over how JDA manages and protects its device fleet.
Play a direct role in JDA's SOC 2 compliance program, not just support it from the sidelines.
Build working knowledge of Microsoft 365 and Entra ID that extends your impact across JDA's broader cloud environment.
Work closely with IT leadership on policy, standards, and strategic direction, not only day-to-day tickets.
You'll Own Endpoint Security & Compliance
Own the SOC 2 controls tied to device enrollment, configuration, patching, and vulnerability remediation across Windows and macOS.
Maintain compliance evidence in the GRC platform for endpoint related controls, supporting audits.
Design and enforce device configuration standards and security baselines.
Identify and remediate device vulnerabilities through scripting and application deployment in Intune.
Maintain working knowledge of Microsoft 365 and Entra ID as they intersect with device and identity management.
Device Lifecycle & Vulnerability Management
Manage the Windows and macOS device lifecycle: enrollment, provisioning, and configuration through Intune and Autopilot.
Roll out configuration changes and adapt device policy as SOC 2 requirements and business needs evolve.
Test and validate configuration changes before wider rollout.
Success Measures
Endpoint related SOC 2 controls pass audit with minimal findings.
Reduced device vulnerabilities and faster time to remediation across the fleet.
Device configuration standards are documented, enforced, and consistently maintained across the environment.
What You'll Bring
5+ years of experience in endpoint or device management in an enterprise environment, supporting both Windows and macOS.
Hands-on experience with Microsoft Intune and Autopilot.
Working knowledge of Microsoft 365 and Entra ID.
Experience supporting a SOC 2 or similar compliance framework, ideally with a GRC platform like Vanta.
Scripting experience, PowerShell preferred, for vulnerability remediation and application deployment.
Preferred Experience
Background in vulnerability management.
Experience with Microsoft Defender for Endpoint and/or Defender for Cloud Apps.
Familiarity with structured change management processes.

Work arrangement
Yes