Our associates celebrate lives. We celebrate our associates.

Consider the possibilities of joining a Great Place to Work!

The Systems Engineer II-MDM will lead the configuration, deployment, and lifecycle management of over 12,000 mobile devices across the enterprise using Microsoft Intune and JAMF Pro. This role ensures secure, scalable, and user-friendly device experiences for both iOS and Android platforms. The engineer will serve as a Tier 3 support resource and collaborate with cross-functional teams to deliver enterprise mobility solutions.

MDM Platform Administration

• Configure and maintain Intune and JAMF policies, profiles, and compliance rules.
• Manage Apple Business Manager and VPP licensing.
• Serve as final escalation for device enrollment and policy issues.

Security & Compliance

• Implement conditional access policies and encryption standards.
• Coordinate VPN client deployments (PaloAlto GlobalProtect).

Collaboration & Integration

• Partner with business units to translate needs into technical solutions.
• Lead platform migrations and enterprise mobility security initiatives.

Support & Documentation

• Provide Tier 3 support and cross-train team members
• Maintain documentation and contribute to process improvement
• Work on and resolve tickets related to mobile devices and IoT devices.

Knowledge, Skills & Abilities

• Ability to troubleshoot a variety of technical problems and own issues through resolution while engaging others when needed.
• Advanced understanding of:
  • Microsoft Intune: device enrollment, compliance policies, configuration profiles, app deployment, conditional access.
  • JAMF Pro: macOS/tvOS management, certificate deployment, security baselines, Apple TV management.
  • Enterprise integration: shared device configurations, OOBE workflows, zero-touch deployment, identity provider integration.
  • VPN client coordination: PaloAlto GlobalProtect or others.
• Strong communication skills—both verbal and written—with the ability to collaborate across technical and non-technical teams.
• Experience managing both iOS and Android devices.
• Demonstrated ability to work independently and lead initiatives in an enterprise environment.

Qualifications

• Minimum 3–5 years of hands-on experience with Intune and JAMF in an enterprise setting.
• Proven track record managing large-scale mobile fleets (5,000+ devices).
• Experience with identity providers (Okta, Entra ID, etc.) and SSO integration.
• Microsoft certifications preferred (e.g., MS-102, MD-102).

Work Conditions

• Must be available for evening/weekend work if the need arises.
• Occasional travel may be required.
• Sitting continuously for many hours per day, up to 8 hours per day.
• Manual dexterity required for paperwork, calculators, computers, and phone usage.

Postal Code: 01604

Category (Portal Searching): Information Technology

Job Location: US-1919 Allen Parkway, Houston, Texas - SCI Corporate Office II