Senior Mobile Device Management (MDM) Engineer

At PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem—from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.

Our Information Technology (IT) team leads all aspects of IT systems and processes across the enterprise, including data services, security, compliance, applications, automation, and end-user services. Through innovative and streamlined technology solutions, this dynamic team enables company growth, protects data, and serves as a critical partner to all departments of PowerSchool.

This position will be a focused Senior MDM Engineering scope role. You will own our enterprise device management strategy end-to-end. You'll be the go-to expert for endpoint compliance, security, and lifecycle management across Windows, macOS, and mobile devices — using Microsoft Intune as your primary platform, alongside Automox for patching and Autopilot for provisioning. You will also own virtual end points such as Window 365 devices. 

Key Responsibilities

Endpoint & MDM Engineering

• Own end-to-end strategy, architecture, and execution for enterprise device management using Microsoft Intune and related technologies
• Serve as the primary subject matter expert and accountable owner for endpoint compliance, security posture, and lifecycle governance across the organization
• Manage and optimize the full device lifecycle — provisioning, enrollment, compliance, patching, and retirement — for all employee devices
• Develop and maintain configuration profiles, compliance policies, and application deployment strategies
• Own and oversee planning, execution, coordination, and delivery across supporting administrators and technicians
• Own complex MDM and patching initiatives end-to-end, including the rollout of new solutions such as PAM (Privileged Access Management), RBAC (Role-Based Access Control), and other enterprise toolsets
• Serve as the point person for new toolset rollouts, including permission elevation tools and RMM (Remote Monitoring and Management) platforms
• Own complete OS validation processes for MDM, patching, and compliance ahead of major OS architecture changes — assessing compatibility, testing enrollment and policy behavior, and certifying readiness before enterprise-wide rollout

Systems & Platform Ownership

• Engineer and support core endpoint platforms across Windows, macOS, and mobile devices
• Own the organization's virtual desktop infrastructure (VDI), including provisioning, deprovisioning, operational management, and overall service health
• Manage vendor relationships and coordinate strategic planning for long-term platform sustainability across MDM and VDI environments
• Partner with infrastructure teams on identity (Entra ID/Azure AD), access, and conditional access policies
• Monitor system health and performance, proactively identifying and resolving issues
• Maintain documentation for system configurations, standards, and processes

Asset Management & Technology Standards

• Lead the definition and enforcement of enterprise hardware and asset standards that ensure ongoing MDM compliance and compatibility across the device fleet
• Align hardware and vendor selection decisions with MDM platform requirements, ensuring new devices meet compatibility, compliance, and Autopilot registration standards before deployment
• Own the process ensuring all new endpoints are properly registered and provisioned through Autopilot, partnering with vendors to streamline registration at time of purchase
• Evaluate emerging endpoint technologies and market trends; make recommendations on hardware selection and standards for the organization
• Influence enterprise-wide technology decisions through advanced technical expertise and market awareness

Automation & Optimization

• Automate endpoint deployment and management processes (Autopilot, scripting, policy automation)
• Improve system efficiency by reducing manual processes and standardizing configurations across the endpoint environment
• Drive enterprise-wide initiatives focused on IT automation and workflow optimization

Technical Leadership & Escalation

• Provide technical leadership on major enterprise initiatives, coordinating and directing the work of other administrators and technicians on cross-functional projects
• Serve as the Tier 3 escalation point for complex endpoint and system issues
• Collaborate with Service Desk and regional IT teams on incident resolution and root cause analysis
• Participate in on-call or critical incident response as needed
• Serve as technical leader for lower-level administrators and technicians, providing assistance with projects, processes, and solution development

Security & Compliance

• Define and execute enterprise-wide endpoint security and compliance strategy, including remediation efforts across all devices
• Implement endpoint security controls aligned with enterprise security standards
• Manage endpoint patching across Automox and Intune, ensuring consistent, timely patch compliance across all managed devices
• Apply OS hardening standards and best practices for both macOS and Windows to reduce attack surface and meet enterprise security baselines
• Support compliance initiatives through policy enforcement and device posture management
• Partner with InfoSec on risk mitigation and vulnerability management

• Bachelor of Science in Computer Science, Information Technology, or a related field
• 6-10 years of experience in Systems Engineering, Endpoint Engineering, or a similar role
• Hands-on experience with Microsoft Intune (device management, application deployment, compliance policies)
• Strong knowledge of Windows and macOS administration
• Experience with Azure AD / Entra ID, device identity, and access management
• Solid understanding of endpoint lifecycle management and ITSM processes
• Experience troubleshooting enterprise-level system and device issues
• Experience patching endpoints via Automox and Intune, with working knowledge of OS hardening methods for macOS and Windows

• Experience with MDM migration projects (e.g., JAMF to Intune)
• Familiarity with scripting (PowerShell, Bash) and automation tools
• Experience with Autopilot, VDI, or Windows 365
• Knowledge of ITIL practices and service management platforms (e.g., Freshservice)
• Certifications such as Microsoft Endpoint Administrator Associate or similar

PowerSchool offers the following benefits:

• Comprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)
• Flexible Spending Accounts and Health Savings Accounts
• Short-Term Disability and Long-Term Disability
• Comprehensive 401(k) plan
• Generous Parental Leave
• Unrestricted paid time off (known as Discretionary Time Off - DTO)
• Wellness Program, including ClassPass & Employee Assistance Program
• Tuition Reimbursement
• Optional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage

The compensation range is specific to the United States and it incorporates many factors including but not limited to an applicant's skills and prior relevant experience and training; licensures, degrees, and certifications; internal equity; internal pay ranges; and market data/range parameters.

PowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing [email protected].