Cloud Endpoint Engineer

*This role is not eligible for sponsorship* This role is hybrid with expectations of M - W on-site in our Weston, FL or Newark, OH office. RESPONSIBILITIES #Ll-hybrid #Ll-KS1 Build, modify, and improve automation workflows and integrations across multiple systems to enhance operational efficiency. Manage and administer cloud-based services such as Azure(IAAS), Microsoft Intune, MS O365, and Azure Active Directory (AAD)/EntraID. Improve, maintain, and administer VDI environments (e.g., Azure Virtual Desktop (AVD), Windows365). Evaluate and deploy software, upgrades, and security patches while ensuring compliance with configuration standards. Implement and maintain security configurations for endpoints, ensuring protection through compliance with governance and industry standards. Configure and deploy device management policies via AD Group Policy, Microsoft Intune, and Endpoint Configuration Manager (MECM)(SCCM) Oversee vulnerability and threat management practices, addressing security risks in endpoint environments. Monitor, evaluate, and manage endpoint performance to ensure a superior user experience and productivity. Collaborate with support teams and cross-functional business units to resolve production and system issues effectively. Provide third-tier support for complex end-user issues, ensuring timely resolution and minimal disruption to operations. Document all department activities, processes, and procedures to ensure clear communication and knowledge sharing. Maintain awareness of and adherence to Bank's compliance requirements and risk management concepts, expectations, policies and procedures and apply them to daily tasks. Deliver a consistent, high level of service within our Serving More standards. Other duties as assigned. EDUCATION - CERTIFICATIONS - WORK EXPERIENCE High School Diploma or equivalent required Bachelor's degree in computer science or software engineering preferred Microsoft Certified Azure Administrator Associate and Microsoft Certified Azure Virtual Desktop Specialty, preferred Desired Technical Skills: Advanced knowledge of the administration of MS Windows, M365, Azure, and Active Directory. Intermediate knowledge working with Windows Operating Systems support, Microsoft Office Suite support, Active Directory best practices, and Active Directory Group Policy Experience with the deployment of software through an enterprise management tool, including the repackaging of software installers and drivers. Knowledge of Virtual Desktop Infrastructure (VDI) and Desktop as a Service such as AVD, VMware Horizon, and thin client management. Familiarity with automation and scripting tools and platforms, such as Terraform, Ansible, PowerShell, and Python. Additional responsibilities include managing and securing EUC environments across on-premises and cloud infrastructures, focusing on Microsoft Intune and Azure solutions. This role ensures a seamless and secure user experience by applying best practices in device management, vulnerability and threat management, and governance. The ideal candidate will work to provide a secure, scalable, and user-centric endpoint environment that supports productivity and operational excellence. SCHEDULE Typical office hours are M-F 8a-5p. This position is exempt and full-time. A minimum 40 hours is required per week. Position may require evening and weekend work to oversee implementations and problem resolutions.