Systems Engineer, Endpoint & Network Operations ( PST & MST Time Zone) Hybrid

EP Wealth Advisors (EPWA) is a wealth management advisory firm with over $49.1 billion as of June 30, 2026, serving predominately high net worth individuals. EPWA fosters an inclusive environment that offers opportunities for our associates to learn, grow and enhance their skills to take on new challenges to progress in their professional careers. We are hiring a Systems Engineer, Endpoint & Network Operations to help build and operate the endpoint, branch infrastructure, and connectivity foundation for a growing, cloud-based wealth management firm. This role serves as the technical platform owner for endpoint engineering and patch management, supports branch network reliability, and acts as an engineering resolver for issues beyond front-line support. The role will help standardize office technology patterns, improve monitoring and automation, support M&A and new-office cutovers, and partner closely with Cloud & Identity, Service Desk, Cybersecurity, and Integration teams to keep EP Wealth's distributed office environment secure, connected, and reliable. Duties and Responsibilities Endpoint Engineering Serve as the technical platform owner for core endpoint platforms, including Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar) — covering day-to-day configuration, platform health, and administration. The employee-facing service experience remains with the Service Desk; this role owns the underlying platform. Configure and maintain endpoint deployment profiles and provisioning workflows, including application packaging, deployment, and application push/self-service distribution through Microsoft Company Portal. Own the enterprise patch and update strategy across the endpoint fleet, including patch cadence, testing, and rollout. Support endpoint security baselines and compliance policies in partnership with the CISO and the cybersecurity team. Perform engineering-level troubleshooting and remediation for endpoint platform issues (Intune, Autopilot, and patch management) that require configuration, systemic, or vulnerability-level correction — not routine end-user issues, which remain with the Service Desk. Build and maintain endpoint automation (e.g., PowerShell, Intune remediation scripts) to reduce manual effort and recurring issues. Network & Branch Office Support Engineering This role helps build and operate EP Wealth's branch reliability model, including proactive monitoring, technical acceptance standards, recurring issue remediation, vendor escalation, and post-cutover stabilization for new offices, office moves, and acquired partner integrations. Configure and support network infrastructure for branch offices, including routing, switching, wireless, and SD-WAN/firewall platforms. Support the migration of branch office networking, camera, and digital access systems from Meraki and Netgear to Ubiquiti as part of the Office of the Future initiative, as EP Wealth's new branch networking standard. Support adherence to branch network standards and configuration requirements set by engineering leadership. Coordinate the technical work of third-party vendors performing physical rack-and-stack activities and assist with remote configuration. Support carrier and network vendor technical escalation for connectivity issues. Support branch monitoring, telemetry, and the branch uptime/reliability dashboard, and contribute to remediation of recurring connectivity issues. Travel to branch offices (~25%, Regional) to support new-office network builds, on-site remediation, and technical validation, including M&A integration cutovers. Support the network and connectivity workstream for partnership integrations, including access configuration, cutover support, and post-cutover stabilization. Systems Administration Support Microsoft 365, Entra ID, and Azure administration, including Conditional Access, MFA, and PIM configuration, in partnership with the Microsoft Cloud & Identity platform team. Maintain detailed documentation of system and network configurations, procedures, and troubleshooting/runbooks. Support major incidents and emergency outages in accordance with business continuity and disaster recovery plans. Support vendor management for assigned endpoint and network platforms and contracts. Tier 3 Escalation, Reliability & Change Serve as the engineering-level escalation point for endpoint, network, and patch management issues that exceed Service Desk / Tier 1–2 capability — handling escalations that require engineering diagnosis, configuration, remediation, or systemic correction, not general front-line overflow. Perform root-cause analysis and drive down recurring incidents through remediation and automation. Provide technical risk assessment, implementation planning, and rollback planning for changes within scope, in line with EP Wealth's technical change authority model. Support the implementation and operation of technical security controls on endpoint and network platforms, in partnership with the CISO and the cybersecurity team. Qualifications This role is classified as hybrid and requires the employee to perform work both remotely and from the designated office location within the applicable market identified in this job posting. Candidates must reside within a reasonable commuting distance of the listed office location. Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience (preferred). 5+ years of experience in systems administration, endpoint engineering, or network engineering in a corporate/enterprise environment, with demonstrated Tier 3-level ownership. Experience in multi-site environments, M&A, or distributed branch operations preferred. Endpoint platform experience: hands-on experience administering Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar), including application push/deployment via Micro