Senior Endpoint Management Engineer

Title:

KBR is seeking a Senior Endpoint Management Engineer to join our enterprise technology and digital workplace team. This senior engineering role is responsible for delivering secure scalable and modern endpoint management services across Windows macOS Linux and mobile platforms. You will provide technical leadership across endpoint operations compliance automation patch management and device security while supporting enterprise-wide transformation initiatives.

Partnering closely with cybersecurity identity cloud infrastructure and operational teams you will help define and implement endpoint management standards that improve security posture operational efficiency and end-user experience. The successful candidate will possess deep technical expertise in Microsoft endpoint technologies and a proven ability to support large-scale enterprise environments.

This is a permanent full-time position based in Australia. Due to the nature of the work and customer requirements candidates must be eligible to obtain and maintain an Australian Government Security Clearance.

In September 2025 KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense intelligence space aviation and critical infrastructure customers to deliver high-end engineering science technology and mission support solutions.

Key Responsibilities

• Provide senior engineering support for enterprise endpoint management platforms across servers workstations and mobile devices.
• Design and maintain endpoint compliance patching deployment remediation and configuration management solutions.
• Administer Microsoft Intune including device enrolment configuration profiles application deployment compliance policies and remediation activities.
• Support MECM/SCCM and Microsoft co-management technologies within hybrid enterprise environments.
• Automate operational processes through PowerShell scripting and policy-based automation frameworks.
• Administer endpoints across Windows macOS Linux iOS and Android platforms.
• Manage endpoint lifecycle services including provisioning deployment upgrades patching and vulnerability management.
• Troubleshoot and resolve complex endpoint identity deployment and compliance issues.
• Support security and compliance controls including Conditional Access endpoint compliance enforcement and device trust frameworks.
• Participate in incident problem risk and change management activities.
• Develop and maintain operational documentation standards technical procedures and support runbooks.
• Collaborate with cyber security cloud networking and infrastructure teams to enhance endpoint capabilities and security posture.
• Support endpoint modernization initiatives Microsoft 365 adoption programs and cloud transformation projects.
• Drive continuous improvement automation and operational maturity across endpoint management practices.
• Provide technical guidance and mentoring to junior engineers and support teams.

Basic Qualifications

Education & Experience

• Bachelors degree in Information Technology Computer Science Engineering Information Systems or a related discipline; or equivalent professional experience.
• 7 years of experience managing and supporting enterprise endpoint environments.
• Experience administering Microsoft Intune MECM/SCCM and modern endpoint management platforms.
• Experience supporting enterprise Windows macOS Linux and mobile device environments.
• Experience implementing endpoint compliance vulnerability remediation patch management and device security controls.
• Eligibility to obtain and maintain an Australian Government Security Clearance.

Skills & Competencies

• Strong expertise in Microsoft Intune Endpoint Manager and modern device management technologies.
• Advanced knowledge of Microsoft Windows workstation and server administration.
• Experience with application packaging software deployment and endpoint remediation.
• Strong PowerShell scripting and automation skills.
• Experience managing macOS environments including Automated Device Enrollment (ADE) update management and application deployment.
• Knowledge of Linux administration scripting and package management.
• Understanding of enterprise networking concepts including TCP/IP VLANs DNS and firewall technologies.
• Working knowledge of Microsoft Entra ID hybrid identity Azure administration and Microsoft 365 platforms.
• Experience implementing Conditional Access compliance policies and endpoint security controls.
• Strong analytical troubleshooting communication and stakeholder engagement skills.
• Demonstrated ability to operate effectively within complex enterprise and government-aligned environments.

Preferred Qualifications

• Experience with Automox Patch My PC Microsoft Autopatch and Windows Update for Business.
• Experience with Bash scripting Ansible and other infrastructure automation tools.
• Knowledge of Microsoft Azure Azure Arc and hybrid cloud management solutions.
• Experience with Microsoft Defender Cisco ISE Zscaler and enterprise endpoint protection technologies.
• Experience supporting defence aerospace government energy transport or critical infrastructure organisations.
• Familiarity with Australian Government security frameworks the Essential Eight ISM (Information Security Manual) and ASD cyber security guidance.
• Relevant certifications including Microsoft Certified: Endpoint Administrator Associate AZ-104 Microsoft Enterprise Administrator Expert CISSP or equivalent certifications.