Windows Device Engineering Lead

Role: Lead Windows Device Engineering to develop and execute the global endpoint management strategy for approximately 50,000 Windows devices. Key responsibilities include architecting and optimizing device management platforms using Microsoft Intune and SCCM/MEMCM, overseeing device lifecycle processes, managing patching and vulnerability remediation cycles, and enforcing security policies aligned with CIS Benchmarks and Microsoft Defender for Endpoint. The role involves scripting automation with PowerShell, leading application packaging efforts, and coordinating a distributed offshore team to ensure operational excellence. The candidate will serve as the primary liaison among endpoint, security, and business stakeholders, maintaining documentation, reporting, and governance standards. Requirements: 7+ years of enterprise-scale Windows endpoint management experience, including managing global fleets; 3+ years of direct team leadership, including offshore teams; deep expertise in Intune, SCCM, PowerShell scripting, application packaging, and security compliance. Preferred skills include certifications (e.g., MD-102), experience with Autopilot/Autopatch, Azure AD, endpoint analytics, and familiarity with ITSM tools and non-Windows OS platforms. The role emphasizes technical leadership, cross-cultural communication, security-first mindset, ownership, and continuous improvement. Work setup requires availability for daily stand-ups with offshore teams, participation in on-call rotations, and occasional travel (0–10%). Location: Cambridge, MA; salary range: $137,000–$215,270.