Sr. Unified Endpoint Management Engineer

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Brown & Brown is seeking a Sr. Unified Endpoint Management Engineer to join our growing team in Plano, TX!

The Sr. Unified Endpoint Management(UEM) Engineer is responsible for the engineering, administration, optimization, and lifecycle management of enterprise endpoint platforms, including Microsoft Intune, Windows 365 Cloud PCs, Windows Autopilot, and related Microsoft technologies.

This senior individual-contributor role owns durable platform outcomes, establishes engineering standards, drives automation and continuous improvement, and serves as an escalation point for complex endpoint issues.

The role focuses on secure, scalable policy and device management, application packaging and distribution, and the design, planning, and deployment of virtual desktop solutions that deliver a consistent and reliable end-user experience.

The engineer works across Security, IT Service, Infrastructure, application teams, and business stakeholders to ensure endpoint services remain secure, supportable, and aligned with business needs.

How You Will Contribute:

Manage, tune, and govern Microsoft Intune policies, compliance settings, configuration profiles, update rings, and endpoint security policies for a primarily Windows environment with a smaller macOS footprint.

Support security baselines, Conditional Access controls; manage and enforce device compliance rules, encryption standards, and endpoint protection configurations in partnership with Security.

Package, test, deploy, and manage enterprise application distribution across endpoints; coordinate validation with testing and application owners and monitor deployments for reliable, compliant delivery.

Troubleshoot complex Intune enrollment, application deployment, provisioning, identity, and policy-conflict issues; lead root cause analysis and implement permanent corrective actions.

Design, configure, deploy, and support Windows 365 Cloud PC solutions for scalability, performance, security, and operational efficiency.

Engineer and continuously improve Windows Autopilot and device provisioning processes, including configuration standards, enrollment experience, performance tuning, and troubleshooting.

Ensure endpoint designs and deployments follow enterprise architecture, security, operational, and compliance standards and accepted industry practices.

Develop and maintain PowerShell automation and proactive remediation solutions that reduce manual effort, improve consistency, and strengthen endpoint health.

Monitor endpoint platform health, compliance, deployment performance, and service trends; use data to identify risk and prioritize improvements.

Own technical standards, platform documentation, operating procedures, diagrams, and support knowledge for assigned endpoint services.

Collaborate with IT Service, Security, Infrastructure, networking, identity, application, and M&A teams to improve the full endpoint lifecycle and end-user experience.

Serve as a senior escalation point for complex endpoint incidents and problems; partner with Microsoft and other vendors when advanced product support is required.

Evaluate new Microsoft endpoint capabilities and recommend adoption based on business value, security, supportability, cost, and architectural fit.

Plan and execute platform upgrades, feature releases, pilots, and production changes using established change, testing, release, and rollback practices.

Provide technical guidance, peer mentoring, and knowledge transfer to engineers and support teams; contribute to team standards and engineering discipline.

Skills & Experience to be Successful:

7+ years of progressive experience in endpoint engineering, enterprise device management, or related infrastructure engineering, including at least 5 years of hands-on Microsoft Intune administration.

Advanced hands-on proficiency with Microsoft Intune, Windows Autopilot, Windows 365 Cloud PCs, Microsoft Entra ID, Windows 10/11, and Conditional Access policies.

Strong experience with device configuration, compliance, endpoint security baselines, application packaging and deployment, patching, and modern provisioning.

Strong PowerShell scripting skills for administration, automation, reporting, troubleshooting, and proactive remediation.

Demonstrated experience diagnosing complex endpoint, identity, enrollment, application, and policy issues in an enterprise environment.

Working knowledge of endpoint security, vulnerability remediation, encryption, least privilege, Zero Trust principles, and audit or compliance requirements.

Experience creating technical standards, solution documentation, operational procedures, and knowledge-transfer materials.

Ability to participate in scheduled production changes and critical-incident support outside normal business hours when required.

Experience with Microsoft Graph API, Log Analytics, Azure Monitor, or reporting platforms used to automate and monitor endpoint services (preferred).

Experience managing mobile or multi-platform endpoints such as iOS, Android, or macOS (preferred).

Teammate Benefits & Total Well-Being

We go beyond standard benefits, focusing on the total well-being of our teammates, including:

Health Benefits : Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance

Financial Benefits : ESPP; 401k; Student Loan Assistance; Tuition Reimbursement

Mental Health & Wellness : Free Mental Health & Enhanced Advocacy Services

Beyond Benefits : Paid Time Off, Holidays, Preferred Partner Discounts and more.

Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.

Recruiting Vendor Disclosure Statement

Brown & Brown does not accept unsolicited resumes from external recruiters, recruitment vendors or employment agencies ("Recruiting Vendors"). Recruiting Vendors must have a valid written agreement and received prior written authorization from an authorized Brown & Brown representative before submitting candidates for any publicly posted role. Any unsolicited resumes submitted to Brown & Brown or its employees become the property of Brown & Brown, and no fees will be paid for such submissions. Additional information regarding this policy can be found on our careers page.

The Power To Be Yourself

As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, “The Power to Be Yourself”.