MDM/Endpoint Engineer

Who is KDInfotech? KDInfotech offers small and medium sized businesses solutions and support with all aspects of their infrastructure nationwide. We develop, manage, and partner on projects such as, application support, network administration, communication systems, and workstation performance. We like to call ourselves Information Technology Partners that will come in and help in any situation necessary. As a fast growing successful company, we are redefining how tech support benefits our clients. A Day in the Life of our MDM/Endpoint Engineer As an MDM/Endpoint Engineer at KDI, you will be responsible for supporting and securing the full device lifecycle across our client’s organization. This includes but is not limited to mobile device management, endpoint provisioning, patch and update management, endpoint security hardening, and support for devices operating in a regulated, validated-systems environment. Who Should Apply: An ideal candidate is self-motivated and passionate about technology, and naturally curious. We are looking for someone who enjoys taking an outside-the-box approach to unique problems and who understands the added rigor that comes with managing endpoints in an environment where data integrity, privacy, and compliance are non-negotiable. Responsibilities Administer and maintain MDM platforms (Jamf Pro, Microsoft Intune, Workspace ONE, or similar) across macOS, Windows, iOS, and Android fleets Design and maintain zero-touch provisioning workflows (Apple Business Manager, Windows Autopilot) for new hire, lab, and shared-device enrollment Build and enforce configuration profiles, compliance policies, and security baselines aligned with HIPAA, GxP, and other biohealth regulatory requirements Manage patch, OS update, and application deployment cycles across the endpoint fleet Monitor client and internal endpoint compliance and proactively resolve non-compliant or at-risk devices Leverage automation and scripting to optimize enrollment, patching, reporting, and remediation workflows Partner with Security and Compliance teams to support audits, risk assessments, and validation documentation for regulated devices and systems Troubleshoot common endpoint hardware, OS, and MDM policy issues Work with business process owners to write and implement device management policy, including access controls, data protection, and retention standards Qualifications and Skills 3+ yrs. administering an MDM platform (Jamf Pro, Intune, Workspace ONE, or similar) Experience managing both macOS and Windows endpoint fleets within a single environment Windows administration/GPO management experience Experience with Apple Business Manager / Windows Autopilot zero-touch provisioning Working knowledge of Active Directory / Entra ID and endpoint identity and authentication Scripting experience (Bash, Zsh, PowerShell, or Python) for automation and remediation Familiarity with compliance frameworks relevant to biohealth/life sciences (HIPAA, GxP, etc…) Excellent written and verbal communication skills Ability to write and maintain technical documentation Desired Skills Experience supporting endpoints in a validated/regulated systems environment Familiarity with mobile application management (MAM) and conditional access policies Experience with endpoint security/EDR tooling and its integration with MDM platforms Working knowledge of certificate-based authentication and PKI for device trust Working knowledge of infrastructure-as-code or automation frameworks for endpoint provisioning Pay: $100,000.00 - $130,000.00 per year Benefits: 401(k) 401(k) matching Dental insurance Health insurance Life insurance Paid time off Parental leave Retirement plan Vision insurance Work Location: Remote