Cloud engineer Jobs in Denver, CO

PTMA Financial Solutions, provides treasury management, liquidity management, and other financial products and services to the public sector. In addition to more than 12,000 local governments, school districts and other public entities, we also partner with over 1,000 financial institutions to help strengthen communities from coast to coast. Our family of financial services companies offers local government investment pool administration, investment advisory services, term investments, cashflow analysis, bond proceeds management, and public finance services for public entities plus stable deposit funding solutions for financial institutions. Our financial expertise, comprehensive products, and advanced technology help clients achieve more today for a better tomorrow. The firm’s primary operational hubs are in Denver, Colorado, and Naperville, Illinois, with other offices throughout the United States.

Work Authorization (Required)

Candidates must be authorized to work in the United States without employer sponsorship now or in the future. This role is not eligible for visa sponsorship or transfer.

Job Summary:

The Systems Administrator, Cloud and Endpoints at PTMA Financial Solutions is a mid-level individual contributor responsible for owning the endpoint management tower within Corporate IT. Supporting more than 300 employees across more than 10 office locations in the United States, this role serves as the subject matter expert for endpoint compliance, patch management, device lifecycle, virtual desktop infrastructure, and the IT knowledge base. This is a hands-on engineering role with defined domain ownership, not a generalist support position. The role reports to the Corporate IT Manager.

Duties/Responsibilities:

• Own and maintain endpoint management policies, device enrollment, compliance baselines, and Apple device management using enterprise MDM platforms (e.g., Microsoft Intune, Jamf, or equivalent).
• Manage zero-touch device provisioning and automated enrollment workflows (e.g., Windows Autopilot, Apple Business Manager, or equivalent).
• Operate the full patch lifecycle: deployment schedules, exception handling, failed-patch remediation, and compliance reporting for leadership.
• Manage hardware asset lifecycle across more than 10 office locations: asset tracking, 4-year device refresh planning, and procurement cart submission for Corporate IT Manager approval.
• Build and maintain automation scripts for endpoint management and device provisioning (e.g., PowerShell, Python, or equivalent); collaborate with the engineering team on cross-domain automation projects and shared tooling.
• Generate and maintain compliance and audit reporting for all endpoint platforms in scope: device compliance posture, patch status, enrollment coverage, and hardware asset inventory; deliver to Corporate IT Manager on a defined cadence

Skills & Qualifications:

• 3+ years in a systems administrator, endpoint engineer, or desktop engineer role with direct responsibility for a managed endpoint environment of 100+ devices.
• Hands-on experience with at least one enterprise MDM platform: policy configuration, device enrollment, compliance management, and troubleshooting.
• Scripting proficiency in PowerShell or equivalent; demonstrated use of scripting to automate endpoint management tasks.
• Working knowledge of patch management tools: deployment scheduling, exception handling, and compliance reporting.
• Relevant certifications preferred (e.g., Microsoft MD-102, AZ-104, CompTIA A+, or equivalent).

Physical Requirements:

• Must be able to work at a computer for extended periods of time.
• Must be able to lift up to 30 lbs. when handling IT equipment, servers, and hardware shipments.
• Must be able to travel to PTMA office locations across the United States as needed.

Additional Information:

• Travel: Occasional travel to PTMA office locations across the United States is required (estimated 15-20%). This is a multi-site environment and site visits are part of the role.
• On-Call: This role includes rotating on-call coverage for after-hours Sev-1 and Sev-2 incidents.
• Evolving Responsibilities: Responsibilities are defined at time of hire and subject to change as the organization scales and team needs develop.

The pay range for this role is:
90,000 - 110,000 USD per year(Hybrid - Colorado)
90,000 - 110,000 USD per year(Hybrid - Illinois)

PI3631edb76fc3-30511-41108541