Microsoft 365 Endpoint Engineer

GeneDx (Nasdaq: WGS) delivers personalized and actionable health insights to inform diagnosis, direct treatment, and improve drug discovery. The company is uniquely positioned to accelerate the use of genomic and large-scale clinical information to enable precision medicine as the standard of care. GeneDx is at the forefront of transforming healthcare through its industry-leading exome and genome testing and interpretation services, fueled by the world’s largest, rare disease data sets. For more information, please visit www.genedx.com.

The Microsoft 365 Endpoint Engineer reports to the IT Systems Engineering Lead and provides business-centric value to IT service capabilities by designing, improving, and supporting business critical systems on the IT Systems Engineering team. In this role, you will support critical IT services in our organization. You will partner closely with the Head of IT Services, IT Systems Engineering Lead, Service Desk Lead, and other business departments to develop and optimize shared IT services. 

This role will be accountable for the management of Microsoft M365 solutions, Microsoft Entra ID / Identity Management, and endpoint device systems, while driving improvements to enhance user experience and advance system automations within the IT Systems Engineering domain. 

Job Responsibilities 

• Design, implement, and maintain application deployment, configuration policies, zero-touch deployment, and patch management utilizing endpoint management platforms including Intune (both hybrid and fully Azure joined endpoints), SCCM, Jamf, PatchMyPC, and other endpoint management tools.
• Manage M365 collaboration services, ensuring security and compliance settings/configurations are upheld, while collaborating with other team members to enhance usability and functionality.
• Manage and maintain on-premises Active Directory (AD) and Microsoft Entra ID services, ensuring seamless integration, security, and reliability, with a focus on identity management, conditional access, and Single Sign-On (SSO)/Just-In-Time Provisioning (JIT).
• Utilize Jira for Project/Task management to track progress and milestones, and Confluence for documentation and team collaboration, ensuring all work is accurately recorded and kept current.
• Effectively communicate ticket progress and status updates to internal customers, the IT Service Desk, and other service team members, ensuring timely resolution and adherence to all published SLAs (Service Level Agreements), productivity goals, and NPS/CSAT scores.
• Proactively collaborate with colleagues and other stakeholders to perform process improvements, software and hardware testing, technical feedback, and assistance with documentation. 
• Other duties may be assigned.

Education, Experience, and Skills

• +2 years of IT experience and/or College education in related field.
• Expert in endpoint management platforms including Intune (both hybrid and fully Azure joined endpoints), SCCM, and Jamf.
• Extensive experience in designing, creating, and maintaining Microsoft Azure's Identity Access Management (IAM) products including Conditional Access policies, Microsoft Data Loss Prevention (DLP), Entra ID, and Microsoft Defender Suite.
• Extensive experience managing email services, including tools such as Exchange Online, Zix, FortiMail, and mail relay systems.
• Proficient in scripting and code review using PowerShell and Bash, with experience in storing and managing scripts in shared repositories.
• Adept with multi forest Microsoft Active Directory, Microsoft Azure Active Directory in hybrid environments, and OpenLDAP integrations. 

Physical Demands

• Ability to stand, walk, and sit for extended periods.
• Ability to lift 50 pounds.

Work Environment

• Work is primarily performed in an office setting with a typical climate-controlled environment or at home (work form home).
• Occasional exposure to manufacturing or warehouse areas, which may involve loud noises, dust, and varying temperatures.
• The role may require occasional travel to GeneDx sites, with potential exposure to outdoor weather conditions.
• Standard work hours are Monday through Friday, 9 AM to 5 PM EST, with occasional off hours to implement system changes, update, and/or emergency outage response.