Windows Device Engineering Lead

Role: Lead Windows Device Engineering for enterprise endpoint management, overseeing a global fleet of ~50,000 devices. Responsibilities include designing and optimizing device lifecycle processes, implementing patching and vulnerability management, enforcing security policies aligned with CIS benchmarks and Microsoft Defender for Endpoint, and leading application packaging and deployment efforts. The role involves managing and mentoring an offshore team, ensuring operational excellence across time zones, and maintaining comprehensive documentation and reporting. Qualifications: 7+ years in enterprise Windows endpoint management, with hands-on expertise in Microsoft Intune, SCCM/MEMCM, PowerShell scripting, and application packaging. Proven experience managing large, distributed device fleets and coordinating global IT operations; 3+ years leading technical teams, including offshore resources. Preferred skills include familiarity with Azure AD, Autopilot, ITSM tools, and endpoint security tools like CrowdStrike or Tanium. High-value specifics: Focus on security-hardening, compliance (CIS), cloud-native management (Intune, Autopilot), and integrating MDE at scale. The position reports to IT leadership, involves collaboration with security and operations teams, and requires availability for early/late hours and occasional travel (0–10%). Work setup: based in Cambridge, MA, with hybrid flexibility and global operational demands.