Sr. Endpoint Engineer

Genesys empowers organizations of all sizes to improve loyalty and business outcomes by creating the best experiences for their customers and employees. Through Genesys Cloud, the AI-powered Experience Orchestration platform, organizations can accelerate growth by delivering empathetic, personalized experiences at scale to drive customer loyalty, workforce engagement, efficiency and operational improvements.

We employ more than 6,000 people across the globe who embrace empathy and cultivate collaboration to succeed. And, while we offer great benefits and perks like larger tech companies, our employees have the independence to make a larger impact on the company and take ownership of their work. Join the team and create the future of customer experience together.

Role Overview

Genesys is seeking a high-impact Senior Microsoft Endpoint Engineer who operates with staff-level engineering maturity. This role owns the architecture, automation, and evolution of our Microsoft Intune, Autopilot, and Microsoft 365 endpoint ecosystem.

You will lead the transformation toward AI-driven endpoint management, building intelligent automation and self-healing capabilities that improve reliability, reduce operational load, and materially elevate the employee experience. This is a hands-on engineering role with broad architectural influence and requires deep expertise across automation, security, modern device management, and emerging AI-driven operational models.

Key Responsibilities

Architecture & Strategic Ownership

• Own the enterprise architecture and long-term roadmap for modern endpoint management across Windows, iOS, and Android.

• Define global configuration baselines, governance controls, and secure deployment frameworks.

• Architect automation-first and AI-assisted endpoint management frameworks, enabling predictive insights and automated corrective actions.

• Drive the evolution toward self-healing device management, integrating telemetry, AI/ML insights, and automated remediation pipelines.

Enterprise Intune Engineering

• Engineer and optimize Intune policies, baselines, compliance rules, and security configurations at global scale.

• Lead the implementation and operational maturity of Windows Autopilot for automated, zero-touch provisioning.

• Build and maintain enterprise-grade packaging and deployment pipelines (Win32, MSIX, PSADT) with automated update management.

• Deliver intelligent automation workflows that detect issues, trigger remediations, and maintain endpoint health without manual intervention.

AI-Driven Automation & Self-Healing Capabilities

• Design and implement AI-enhanced endpoint automation, leveraging Microsoft Copilot for Security, advanced Graph integrations, and AI-driven operational workflows.

• Build self-healing engines that automatically: Detect configuration drift Remediate policy failures Repair OS or application issues Restore compliance posture

• Integrate AI-based anomaly detection, predictive analytics, and automated decision-making into endpoint operations.

• Drive a shift from reactive support to autonomous remediation using scripting, telemetry, and machine learning signals.

Automation, Scripting & Platform Engineering

• Develop advanced automation modules using PowerShell, Microsoft Graph, and REST-based orchestration.

• Implement CI/CD pipelines for endpoint configuration, policy testing, and controlled rollout management.

• Build internal operational tools and workflows through Azure Automation, Logic Apps, and Power Platform.

Security Integration & Zero Trust

• Partner with Security to align endpoint controls with Zero Trust architecture and regulatory frameworks.

• Operationalize Microsoft Defender for Endpoint, BitLocker, Conditional Access, and device risk scoring.

• Build automated detection and remediation pipelines tied to risk posture and compliance thresholds.

• Drive adoption of emerging Microsoft AI security capabilities.

Telemetry, Observability & AI Insights

• Build advanced KQL-based analytics and dashboards to monitor device health, compliance, performance, and drift.

• Use telemetry with AI/ML insights to proactively identify systemic issues, user-impacting trends, and optimization opportunities.

• Implement intelligent alerting and anomaly detection patterns to improve visibility and reduce operational noise.

Operational Leadership & Escalation

• Serve as the L4 engineering escalation point for the most complex endpoint issues.

• Design operating models that incorporate self-healing, auto-remediation, and AI-based troubleshooting.

• Mentor engineering and operational teams, elevating global maturity in modern endpoint management.

Cross-Functional Impact

• Collaborate across Infrastructure, Security, Identity, Service Desk, and Architecture teams to ensure consistent, reliable endpoint experiences.

• Influence enterprise initiatives requiring endpoint strategy or automation expertise.

• Advocate for employee experience, balancing security, performance, and usability.

Required Qualifications

• 5years of related experience of endpoint engineering experience with deep mastery of: Microsoft Intune / Endpoint Manager (Windows + Mobile)Windows Autopilot provisioning and lifecycle automationMicrosoft 365 Apps deployment and Evergreen updatesEntra ID / Conditional AccessWindows 10/11 configuration, security, and hardening

• Expert-level PowerShell scripting, Microsoft Graph, and REST API automation.

• Proven experience developing self-healing or auto-remediation workflows within Intune or related Microsoft ecosystems.

• Experience implementing or integrating AI-driven operational insights, anomaly detection, or predictive remediation models.

• Strong expertise in Win32/MSIX packaging and enterprise deployment orchestration.

• Proficiency with KQL, Log Analytics, Defender data models, and telemetry-driven engineering.

• Demonstrated ability to troubleshoot complex cross-domain issues at scale (identity, networking, OS, policy, app, security).

• Effective communicator capable of influencing technical and non-technical stakeholders.

Preferred Qualifications

• Microsoft certifications (MD-102, MS-102, SC-100, AZ-305, or equivalent).

• Experience with Microsoft Copilot for Security, Azure AI, or AI-integrated device management platforms.

• Familiarity with SASE/ZTNA, certificate-based networking, and identity governance.

• Experience deploying endpoint architectures in globally distributed, cloud-first environments.

If a Genesys employee referred you, please use the link they sent you to apply.

About Genesys:

Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys Cloud™ is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit www.genesys.com.

Reasonable Accommodations:

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at reasonable.accommodations@genesys.com.

You can expect a response within 24–48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.

This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation—such as application follow-ups or resume submissions—may not receive a response.

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.

Please note that recruiters will never ask for sensitive personal or financial information during the application phase.