Endpoint Engineer, Technology & Security

Our Company   As a part of Brookfield’s $416B credit platform, Oaktree is a premier credit manager emphasizing an opportunistic, value-oriented, and risk-controlled approach to investing across credit, equity, and real estate. Oaktree is committed to cultivating an environment that is collaborative, curious, inclusive and honors diversity of thought. Providing training and career development opportunities and emphasizing strong support for our local communities through philanthropic initiatives are essential to our culture. Oaktree is wholly owned by Brookfield, a leading global investment firm with more than $1 trillion in assets under management. Brookfield owns and operates high-quality businesses and real assets that provide essential services and form the backbone of the global economy. It invests on behalf of institutions and individuals around the world across infrastructure, renewable power and transition, private equity, real estate, and credit. For additional information, please visit Oaktree’s website at  http://www.oaktreecapital.com/ Responsibilities   Oaktree is   seeking   a highly motivated and technical Endpoint Engineer to support the Information   Security team at Oaktree.    Endpoint Management & Engineering   Own and continuously improve the modern endpoint management platform, including Microsoft Intune, Windows Autopilot, Microsoft Entra ID, and related technologies.    Manage the full Windows endpoint lifecycle, including provisioning, enrollment, configuration, compliance, application deployment, patching, OS upgrades, troubleshooting, and retirement.    Lead the transition from SCCM/MECM and Group Policy–based management to modern, cloud-native endpoint management, including decommissioning legacy infrastructure.    Leverage AI-assisted tools and automation to improve endpoint engineering, monitoring, troubleshooting, reporting, and operational consistency.    Microsoft Intune & Modern Management   Design, implement, and   optimize   Intune configuration profiles, compliance and security policies, application deployments, update rings, remediation scripts, and enrollment profiles.    Support Microsoft   Entra   joined, hybrid-joined, co-managed, and cloud-native device management scenarios.    Develop standardized processes for device provisioning,   refresh ,   rebuilds , feature updates, and hardware lifecycle management.    Endpoint Security & Compliance   Implement and   maintain   endpoint security controls, including BitLocker, Microsoft Defender, Windows LAPS, Windows   Hello for   Business,   firewall   policies, attack surface reduction rules, and security baselines.    Configure and monitor compliance policies to ensure devices meet organizational security requirements.    Application & Operating System Management   Package, deploy, test, and support applications using Intune, Win32 app deployment, Microsoft Store, PowerShell, and enterprise software distribution tools.    Plan and execute Windows feature updates and OS migrations, including readiness assessments, pilot deployments, issue remediation, reporting, and production rollouts.    Develop scripts, detection rules, remediation packages, and automation to improve operational efficiency.   Operational Support   Act as the escalation point for complex endpoint issues involving Windows, Intune, Autopilot, SCCM, application deployment, compliance, authentication, and device management.    Diagnose and resolve issues using endpoint logs, Intune reporting, Autopilot diagnostics, PowerShell, Event Viewer, SCCM client logs, and Entra device records.    Participate in incident response, change management, root cause analysis, and continuous service improvement.    Documentation & Collaboration   Maintain documentation for endpoint architecture, standards, policies, deployment processes, application packaging, and support procedures.    Partner with Security, Identity, Infrastructure, Networking, Procurement, and Service Desk teams to deliver endpoint initiatives.    Support audits, compliance efforts, risk assessments, and endpoint modernization projects.   Qualifications   Required Qualifications   5+ years of relevant experience   Strong troubleshooting skills across Windows OS, device enrollment, endpoint policy, application deployment, network connectivity, certificates, user profiles, and endpoint security controls.   Ability to write clear technical documentation and communicate effectively with technical and non-technical stakeholders.   Preferred Qualifications   Microsoft certifications such as Microsoft 365 Certified: Endpoint Administrator Associate, Azure Administrator Associate, or related Microsoft security and identity certifications.    Experience migrating from SCCM/GPO-based environments to Microsoft Intune and modern endpoint management.    Experience with Microsoft Entra Conditional Access, device compliance, Zero Trust, and Microsoft Defender for Endpoint.    Experience managing Apple Business Manager, macOS, iOS/iPadOS, and Android devices through Intune.    Experience with enterprise application packaging and deployment, including Win32, MSI/MSIX, detection rules, dependencies, and deployment rings.    Experience supporting Windows Hello for Business, Cloud Kerberos Trust, Universal Print, VPN, virtual desktop/Citrix environments, and line-of-business applications.    Experience using AI-assisted tools (e.g., Microsoft Copilot or Security Copilot) to improve endpoint automation, troubleshooting, reporting, and documentation .   Personal   Attributes   Strong endpoint engineering mindset with the ability to   design for   scale, reliability, security, and operational simplicity.   Ability to modernize legacy endpoint practices while   maintaining   business continuity.   Strong analytical and troubleshooting skills.   Security-first mindset with practical