Senior Endpoint Engineer

Job Summary

Senior Endpoint Engineer –

Location:

US-MA-Boston. Type:
Regular Full-Time. Category/Department: IT.

About Suffolk
Suffolk is a national enterprise that builds, innovates, and invests. We provide value across the entire project lifecycle through our core construction management services and complementary business lines in real estate investment, design, self-perform construction, and technology start-up investment (Suffolk Technologies). By integrating data, artificial intelligence, and advanced technology through our Seamless Platform, we connect design, construction, and operations to deliver smarter, more predictable results and redefine how America builds.

Suffolk - America’s Contractor - is a national company with more than $9 billion in annual revenue, 3,000 employees, and 17 offices. Suffolk manages some of the most complex and transformative projects in the country across healthcare, life sciences, education, gaming, aviation, transportation, government, mission critical, and commercial sectors. Suffolk is privately held and is led by founder, chairman and CEO John Fish.

Suffolk is ranked #8 on ENR’s list of "Top CM-at-Risk Contractors." For more information, visit

• Administer and optimize Microsoft Intune for Windows 10/11 and macOS endpoints across Suffolk's enterprise.
• Design, deploy, and maintain device configuration profiles
  , compliance policies, and endpoint security baselines.
• Manage device enrollment strategies including Windows Autopilot and Apple Automated Device Enrollment (ADE/DEP).
• Package, deploy, and maintain applications required for corporate and field users (Win
  32, PKG, DMG, LOB apps).
• Support secure access to Suffolk systems using Azure AD (Entra ) device identity and Conditional Access.
• Partner with Information Security to implement and enforce endpoint security controls (Bit Locker, File Vault, Defender, Compliance Policies).
• Manage OS updates, feature releases, and patching strategies for Windows and macOS devices.
• Own endpoint hardware standards and lifecycle
  , including device specifications, model selection, and design for Windows and macOS laptops.
• Partner with business units, field teams, and IT stakeholders to ensure endpoint hardware aligns with role-based job requirements
  , performance needs, and construction-site realities.
• Identify opportunities to integrate AI-driven capabilities into the endpoint engineering model, including device health monitoring, remediation, analytics, and operational efficiency.
• Lead hardware refresh planning, including evaluation, vetting, and hands-on testing of new laptop models to ensure compatibility with Intune, security controls, and required applications prior to deployment.
• Partner with IT, Security, and Service Delivery teams to evaluate and adopt AI-assisted tools and workflows that enhance endpoint reliability, compliance, and support outcomes.
• Monitor endpoint health, compliance, and deployment success; troubleshoot complex endpoint issues.
• Provide tier-3 escalation support for endpoint-related incidents and problems.
• Create and maintain technical documentation
  , standards, and SOPs for endpoint management.
• Participate in modernization initiatives such as Zero Trust, cloud-first device management, and endpoint automation.

• 8+ years of expertise managing Windows and macOS endpoints in an enterprise environment.
• Hands-on experience administering Microsoft Intune / Endpoint Manager in a production environment.
• Strong knowledge of Windows 10/11 and macOS administration.
• Experience with Azure Active Directory (Entra ) device join, hybrid join, and identity concepts.
• Familiarity with endpoint security best practices in regulated or security-conscious environments.
• Expertise in packaging and deploying applications across Windows and macOS.
• Strong troubleshooting skills with the ability to work independently in a fast-paced environment.
• Excellent written and verbal communication skills.

• Preferred Qualifications

• Experience supporting a highly mobile and remote workforce.
• Power Shell (Windows) and Bash (macOS) scripting experience.
• Expertise with Windows Autopilot and Apple ADE/DEP
  .
• Expe…