layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - IT Endpoint Engineer at Panthalassa

Endpoint Management and Zero Touch Deployment
Administer our MDM platforms (Microsoft Intune, JumpCloud) for Windows and macOS devices, including enrollment, configuration profiles, compliance policies, and application delivery.
Architect and execute our zero touch provisioning rollout (Windows Autopilot and Apple Business Manager / Automatic Device Enrollment), eliminating manual imaging for new device deployments.
Drive device enrollment to full coverage and keep it there through regular audit.
Design and implement BYOD policies and enrollment workflows that enable secure access from personal devices.
Own the device lifecycle: procurement standards, refresh cadence, repair, and secure decommissioning.
Endpoint Security and Compliance
Build and enforce endpoint security baselines, patch management cadences, and device health policies.
Deliver the device compliance signals our Conditional Access policies rely on, working with our IAM Engineer to keep policy and posture in sync.
Monitor and respond to endpoint telemetry and security alerts, driving remediation with the relevant owners.
Translate compliance framework requirements (NIST or equivalent) into concrete endpoint controls and documentation.
Escalation and Mentorship
Serve as the primary escalation point for our IT Support Specialists on complex hardware, OS, and device issues.
Mentor the support team and transfer knowledge deliberately so fixes land at tier 1 the next time.
Write and maintain runbooks and knowledge base content in Confluence.
Required Qualifications
Experience administering endpoint management including MDM, device compliance, and application deployment.
Experience building or running zero touch deployment at scale (Autopilot, Apple Business Manager / ADE, or equivalent).
Ability to write clear documentation and turn written policy into enforceable technical controls.
Comfort working across abstraction layers, designing systems one day and swapping hardware the next.
Desired Qualifications
Experience administering a modern MDM solution such as Intune, Jamf, JumpCloud, or Kandji.
Comfort with scripting for endpoint automation (PowerShell, bash, Python).
Familiarity with zero trust concepts and how device posture feeds access decisions.
Experience supporting or implementing a security or compliance framework (NIST, ISO 27001, SOC 2, or equivalent).
Experience with endpoint telemetry and security alert response, including triage, remediation, and root cause.
The above qualifications are desired, not required. We encourage you to apply if you are a strong candidate with only some of the desired skills and experience listed.
Additional Requirements
Available for occasional evening and weekend work to support deployments, maintenance windows, and office moves.
Travel to vendor sites and other company locations as needed.
Intermittently able to work longer hours to support critical needs. While we expect a lot of each other, we also offer a high degree of autonomy and work-life balance, including flexible PTO and flexible working hours.

IT Endpoint Engineer

Employer job description

About the Company

About the Job

Responsibilities

Compensation and Benefits

About this listing

Listing check

Similar jobs

Similar jobs