Compliance & Automation Engineer

Job Description

The Compliance and Automation Engineer is responsible for highly complex activities related to enterprise endpoint management, mobile device management (MDM), and mobile application management (MAM) using Microsoft Intune and the broader Microsoft 365 ecosystem. These activities include the design, deployment, configuration, and ongoing maintenance of Intune policies, compliance frameworks, and device enrollment workflows across Windows, macOS, iOS, and Android platforms. The Compliance and Automation Engineer II will also lead enterprise application packaging and deployment efforts, ensuring reliable and consistent software delivery across the organization. This role works closely with the Information Security Team to enforce security baselines, remediate vulnerabilities, and ensure devices meet organizational compliance standards.

Job Responsibilities & Requirements

What You Will Do:
Responsibilities

• Provide Tier III support for endpoint management issues across IT Operations and IT Development Teams
• Design, deploy, and maintain Microsoft Intune policies for device configuration, and compliance
• Manage device enrollment across Windows Autopilot, Apple Business Manager, and Android OS devices
• Administer and maintain Microsoft Endpoint Configuration Manager (MECM/SCCM) and co-management configurations
• Manage, monitor, and maintain Azure Active Directory (Entra ID), including device registration, Hybrid Azure AD Join, and identity-based access controls
• Design and maintain enterprise application packaging workflows, including Win32 app packaging, MSIX/AppX conversion, and LOB app deployment through Intune and MECM
• Manage the full application lifecycle from packaging and testing to staged deployment and ongoing maintenance
• Develop and maintain PowerShell and scripting solutions to automate application packaging, deployment, and reporting
• Enforce and maintain security baselines, CIS benchmarks, and compliance policies across managed endpoints
• Remediate security vulnerabilities in conjunction with the Information Security Team
• Manage Windows Update for Business, and Windows Auto Patch to ensure compliance reporting numbers are accurate.
• Work with vendors to evaluate and deploy new endpoint management solutions

Qualifications

• Bachelor’s degree in information technology; equivalent combination of experience and education may substitute on a year-for-year basis

• 3+ years of experience managing Windows 10/11 enterprise deployments, including Autopilot

• 3+ years of experience designing, deploying, and managing Microsoft Intune in an enterprise environment

• 3+ years of hands-on experience with enterprise application packaging, including Win32, MSIX/AppX, MSI and all other formats

• 2+ years of experience with Microsoft Endpoint Configuration Manager (MECM/SCCM) and co-management

• 2+ years of experience with Azure Active Directory / Microsoft Entra ID

• Extensive experience with PowerShell scripting for packaging automation, silent installs, and deployment troubleshooting

• Extensive experience with PowerShell App Deployment Toolkit (PSADT) for enterprise application packaging, deployment scripting, and end-user interaction management

• 2+ years of experience with Microsoft 365 security and compliance tooling (Defender for Endpoint, Purview, etc.) - Preferred

• Experience managing macOS, iOS, and Android devices through Intune - Preferred

• Microsoft certifications (MD-102, MS-102, SC-300, or equivalent) - Preferred

Soft Skills
Must be self-motivated, team oriented and possess strong communication and interpersonal skills. Candidate should possess strong organizational skills, be detail oriented, and self-motivated with a demonstrated ability to problem solve. Strong sense of urgency and strong commitment to quality customer service is required. Ability to analyze and interpret data (metrics) to improve the delivery and support of services to our customers. Familiarity with and/or ITIL concepts or certification preferred.
Additional Requirements

• 5% travel may be required.

Physical Demands
This role is performed in an office environment where a computer, telephone and other office equipment are used as needed to perform the duties of the role. This role may need to access areas within the building that are undergoing renovations which may contain jobsite hazards. Occasionally this role will required to push, pull, bend, lift and move up to 25 lbs.

MiTek is a platform innovator and enabler that exists to transform the building industry with better building solutions. In 1955, MiTek transformed residential construction with the invention of the Gang-Nail plate and a digital platform that provided an affordable and scalable way to manufacture wood trusses. Today, MiTek delivers software, services, engineered products, and automated solutions that enable the building industry to improve efficiencies by optimizing the balance between off-site and on-site. With nearly 5,600 team members worldwide, MiTek collaborates across the building industry to enable and accelerate transformational breakthroughs in design and construction to transform the way the industry designs, makes, and builds. As a Berkshire Hathaway (NYSE: BRK-A, NYSE: BRK-B) company since 2001, MiTek has a record of continuous growth and innovation.

MiTek is an E-Verify and Drug and Tobacco-Free Workplace.

We are an equal opportunity employer; and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, national origin, ethnicity, physical or mental disability, sex (including pregnancy, sexual orientation, gender identity or expression, or transgender status), age (40 and over), genetic information (including family medical history), veteran status, or any other protected characteristic.

For accommodation to assist with completing this application, please contact Human Resources at +1 314-434-1200.

www.mii.com