GxP Endpoint Engineer

Role Summary

The GxP Endpoint Engineer will serve as the primary owner of the SCCM environment supporting Moderna’s GxP operations, ensuring all configurations, deployments, and processes align with Quality Assurance (QA) guidance and compliance requirements. This role is responsible for building and maintaining a validated, audit-ready SCCM infrastructure that supports operating system deployments, in-place upgrades, patching, and application distribution. The engineer will define and document GxP configuration standards, implement quality-controlled deployment practices, and ensure every change follows approved validation and change control processes. In collaboration with Endpoint Engineering, GxP Support, QA, Cloud, Identity, and Lab Engineering teams, this individual will drive consistent, compliant endpoint management practices. The position also includes building knowledge base (KB) documentation for support teams, engaging with application owners to ensure deployment success, and managing escalations tied to GxP device operations.

Responsibilities

• Own and manage the SCCM GxP environment, ensuring all configurations, task sequences, and deployments comply with QA guidance and validation standards.
• Design, document, and maintain standard operating procedures (SOPs) and configuration baselines specific to GxP systems.
• Implement and monitor strict QC processes for all deployments, including peer review, QA validation, and change control sign-off prior to production release.
• Oversee all operating system deployments and in-place upgrades (IPU) for validated systems, ensuring consistent execution under GxP change control.
• Manage patching cycles, including Microsoft and third-party updates, coordinating with QA, GxP Support, and Application Owners to plan, validate, and document each phase.
• Create and maintain deployment and compliance reports, providing transparency to QA and management on patch and configuration status across the GxP fleet.
• Collaborate with Application Owners and GxP Support teams to coordinate deployments, validate installations, and resolve environment-specific issues.
• Develop and publish Knowledge Base (KB) articles and operational guides for support teams and end users related to SCCM processes, patching, and imaging.
• Serve as the escalation point for packaging, deployment, and compliance failures impacting GxP systems.
• Partner with QA to participate in audits, provide system validation evidence, and ensure documentation accuracy across all controlled activities.
• Contribute to the ongoing evolution of how SCCM operates in Moderna’s validated environment, helping to design scalable, compliant frameworks for automation and reporting.

Qualifications

• 6+ years of experience in SCCM/MECM administration, including task sequences, OSD, collections, compliance baselines, and application deployments.
• Proven experience managing systems in regulated (GxP, GMP, or validated) environments, adhering to QA and change control processes.
• Strong understanding of QA, QC, and validation principles within endpoint management.
• Experience performing in-place upgrades (IPUs), PXE imaging, and patch management in controlled environments.
• Hands-on experience with third-party patching tools and their integration with SCCM.
• Familiarity with ServiceNow for change control, approval workflows, and incident tracking.
• Ability to produce comprehensive documentation, SOPs, and KBs aligned with GxP validation standards.
• Strong collaboration skills to engage with QA, Application Owners, and Support teams on validation, testing, and incident management.

Skills

• Analytical mindset and attention to detail to ensure every configuration and deployment meets compliance and performance expectations.
• Bachelor’s degree in Information Technology, Computer Science, or a related technical discipline.
• Experience with co-managed SCCM + Intune environments in validated systems.
• Familiarity with JAMF Pro for cross-platform GxP compliance awareness.
• Knowledge of GAMP 5 validation principles or equivalent regulated system frameworks.
• Prior experience generating QA audit documentation or participating in validation testing for endpoint systems.
• Understanding of Windows OS lifecycle management and modern endpoint management best practices.
• Certifications such as Microsoft Endpoint Manager, ITIL, or CompTIA Security+.
• A proactive, methodical approach to process improvement and compliance-driven automation.

Education

• Bachelor’s degree in Information Technology, Computer Science, or a related technical discipline.