Sr Endpoint Management Analyst

Position Title: Sr Endpoint Management Analyst

About Advanced Energy
Advanced Energy Industries, Inc. (NASDAQ: AEIS), enables design breakthroughs and drives growth for leading semiconductor and industrial customers. Our precision power and control technologies, along with our applications know-how, inspire close partnerships and innovation in thin-film and industrial manufacturing. We are proud of our rich heritage, award-winning technologies, and we value the talents and contributions of all Advanced Energy's employees worldwide.

Position Summary

The Sr Endpoint Management Analyst is responsible for the security, lifecycle management, compliance, patching, vulnerability remediation, and operational health of enterprise endpoint operating systems.

This role serves as the primary technical owner for operating system remediation activities across Windows and macOS environments. The position is responsible for designing, implementing, and maintaining secure endpoint operating system configurations while ensuring vulnerabilities are remediated consistently and efficiently.

Working closely with Information Security, Infrastructure Operations, Platform Operations, and Site Support teams, the Senior Endpoint Operating Systems Specialist drives operating system modernization, vulnerability reduction, platform hardening, compliance initiatives, and endpoint security improvements across the enterprise.

Responsibilities

Operating System Vulnerability Remediation

- Serve as the primary technical owner for operating system vulnerability remediation activities.

- Assess and remediate operating system vulnerabilities impacting enterprise endpoints.

- Research security advisories, CVEs, vendor bulletins, and remediation recommendations.

- Develop and execute remediation strategies for Windows and macOS platforms.

- Test and validate security patches, cumulative updates, and feature releases.

- Coordinate remediation activities for critical and high-risk vulnerabilities.

- Verify successful remediation and vulnerability closure.

Operating System Lifecycle Management

- Own the lifecycle management strategy for Windows and macOS platforms.

- Develop and maintain endpoint operating system standards.

- Lead operating system upgrade and migration initiatives.

- Coordinate technology refresh and modernization efforts.

- Identify and remediate unsupported or end-of-life operating systems.

Endpoint Security and Hardening

- Develop and maintain endpoint security baselines.

- Implement operating system security configurations and hardening standards.

- Support compliance initiatives related to endpoint security.

- Reduce attack surface through secure configuration management.

- Partner with Information Security teams to improve endpoint security posture.

Patch Management

- Manage enterprise operating system patch deployment strategies.

- Develop testing methodologies and deployment rings.

- Coordinate monthly and emergency patching activities.

- Monitor patch compliance and remediation effectiveness.

- Troubleshoot update failures and deployment issues.

Endpoint Management and Automation

- Administer endpoint operating system management through:

Microsoft Intune

- MECM/SCCM

- JAMF Pro

- Microsoft Defender

- Create PowerShell-based automation solutions.

- Develop proactive remediation workflows.

- Improve endpoint compliance, monitoring, and reporting capabilities.

- Standardize endpoint configuration management practices.

Technical Leadership

- Serve as the subject matter expert for endpoint operating systems.

- Mentor junior Endpoint Management personnel.

- Develop operational standards and technical documentation.

- Provide escalation support for complex platform issues.

- Recommend strategic improvements to endpoint management practices.

Qualifications

- Bachelor's degree in Information Technology, Computer Science, Information Systems, Engineering Technology, or related field.

- 7+ years of enterprise endpoint management experience.

- 5+ years of experience administering Windows and macOS environments at scale.

- Experience implementing operating system security baselines and remediation strategies.

- Experience managing enterprise patching and operating system lifecycle initiatives.

- CIS Benchmark implementation experience.

- Microsoft Endpoint Administrator certification.

- Security+, CySA+, or similar cybersecurity certification.

- Experience supporting large global enterprises.

- Experience with Tenable, Rapid7, Qualys, Tanium, or similar vulnerability management platforms.

Technical Skills

- Windows 10/11 administration

- macOS administration

- Microsoft Intune

- Microsoft Endpoint Configuration Manager (MECM/SCCM)

- JAMF Pro

- Microsoft Defender

- PowerShell scripting

- Endpoint security and compliance management

- Patch management and vulnerability remediation

As part of our total rewards philosophy, we believe in offering and maintaining competitive compensation and benefits programs for our employees in order to attract and retain a talented, highly engaged workforce. Our compensation programs are focused on equitable, fair pay practices including market-based base pay, an annual pay-for-performance incentive plan, we offer a strong benefits package in each of the countries in which we operate.

Advanced Energy is committed to diversity in its workforce including Equal Employment Opportunity for Minorities, Females, Protected Veterans, and Individuals with Disabilities.
We are committed to protecting and respecting your privacy. We take your privacy seriously and will only use your personal information to administer your application in accordance with the RA No. 10173 also known as the Data Privacy Act of 2012.