Endpoint Migration Engineer

Key Responsibilities

• Provide onsite technical support for endpoint migration waves, including device preparation, re-imaging/provisioning, cutover, user validation and stabilization.
• Validate device inventory and readiness, including hardware compatibility, TPM, SecureBoot, firmware/BIOS and other migration prerequisites.
• Configure and troubleshoot Windows Autopilot, including device registration, profile assignment, OOBE, Enrollment Status Page (ESP), failed/stalled provisioning, wipe/reset and re-provisioning.
• Administer and troubleshoot Microsoft Intune, including enrollment, profiles, device groups, application assignments, compliance, remote actions, Intune Management Extension (IME) and Win32 application deployment.
• Troubleshoot application deployment and packaging issues, including MSI/EXE, PowerShell, detection rules, dependencies, installation failures and logs.
• Support Active Directory onboarding and troubleshoot domain/offline domain join, computer objects/OUs, DNS, domain-controller connectivity, secure channel, Group Policy and first user sign-in.
• Use PowerShell, Event Viewer, dsregcmd, nltest, nslookup, ipconfig, gpresult and endpoint logs for troubleshooting.
• Install, validate and troubleshoot Tanium Client, client registration/check-in, connectivity and endpoint health.
• Troubleshoot software/application deployments through Tanium, including failed package/action execution and deployment-status issues.
• Support CrowdStrike Falcon installation and endpoint health troubleshooting; coordinate platform-level issues with the security team.
• Have working knowledge of Netskope Client and pre-logon/device connectivity and troubleshoot endpoint-side connectivity issues affecting migration or first sign-in.
• Troubleshoot basic endpoint network dependencies including Internet, DNS, DHCP/IP, LAN/Wi-Fi and domain-controller connectivity, and escalate network-side issues when required.
• Support SecureBoot/firmware remediation, printer configuration, drivers/peripherals and local workstation dependencies.
• Validate required applications and endpoint security/management tools after migration and confirm overall user/device readiness.
• Capture logs and error details, resolve migration issues where possible, and coordinate/escalate with endpoint, identity, network, security and application teams.
• Maintain troubleshooting notes, migration procedures and support/runbook updates and provide knowledge transfer during handover.

Required Skills

• Strong hands-on Microsoft Intune administration and troubleshooting.
• Deep hands-on Windows Autopilot, OOBE and ESP troubleshooting.
• Strong Windows 10/11 endpoint engineering and troubleshooting.
• Strong Intune Win32 application deployment and IME troubleshooting.
• Hands-on Tanium experience, including troubleshooting Tanium client and software/package deployment issues.
• Good Active Directory, domain join, DNS, Group Policy and Windows authentication troubleshooting knowledge.
• Good PowerShell and Windows troubleshooting skills.
• Hands-on enterprise endpoint migration, deployment or re-imaging experience.
• Ability to independently troubleshoot onsite and identify when issues require escalation to identity, network, security or application teams.
• Willingness and ability to travel frequently across client offices/sites throughout the USA.

Good to Have

• CrowdStrike Falcon endpoint deployment and troubleshooting.
• Netskope Client / Netskope SSE and pre-logon connectivity knowledge.
• PSADT / Windows application packaging experience.
• BitLocker, TPM, SecureBoot, printer/peripheral and driver troubleshooting.

Experience

• 8+ years of Windows endpoint / EUC engineering experience, with strong hands-on experience in Microsoft Intune and Windows Autopilot. Experience supporting enterprise endpoint migrations or large device deployments is preferred.