Associate Principal - Cloud & Infra Management

Job Title Senior Endpoint Management Engineer P5 Advanced Energy is seeking a highly experienced Endpoint Management Engineer to lead the architecture engineering automation and strategic evolution of Advanced Energys global Unified Endpoint Management UEM ecosystem leveraging multiple endpoint management security and automation platforms to deliver secure scalable and modern workplace services This role is responsible for designing scalable secure and automated endpoint management solutions across Windows macOS iOSiPadOS Android and Linux platforms while driving modernization initiatives technology roadmaps and enterprisewide endpoint transformation efforts The ideal candidate possesses deep expertise in modern endpoint management technologies cloudbased device management security compliance enterprise architecture and automation engineering This position serves as the technical authority for endpoint management platforms and works closely with Security Infrastructure Identity Networking Service Management and Business stakeholders to deliver a worldclass enduser computing experience Vulnerability Management SME Endpoint Vulnerability Management Risk Reduction Serve as the Subject Matter Expert SME for endpoint vulnerability management across Windows macOS Linux iOSiPadOS Android and related platforms Develop and maintain the endpoint vulnerability management strategy standards remediation processes and governance framework Partner with Cybersecurity Infrastructure Application and Risk Management teams to identify prioritize and remediate endpoint vulnerabilities based on business risk and threat exposure Establish riskbased remediation frameworks that align with organizational security objectives and compliance requirements Define vulnerability remediation Service Level Objectives SLOs and Key Performance Indicators KPIs for endpoint platforms Lead enterprise vulnerability review meetings and drive accountability for vulnerability remediation efforts 
 Evaluate emerging vulnerabilities security advisories and zeroday threats and coordinate mitigation strategies across endpoint platforms 
 Leverage tools such as Tanium Microsoft Defender Vulnerability Management Qualys Rapid7 Tenable or equivalent platforms to assess and improve endpoint security posture 
 Create executive dashboards and reporting metrics related to vulnerability exposure remediation performance patch compliance and security risk trends 
 Drive continuous improvement initiatives focused on reducing attack surface and improving endpoint security resilience 
 Application Lifecycle Management ALM SME 
 Enterprise Application Lifecycle Management Modernization 
 Serve as the Subject Matter Expert SME for the enterprise application lifecycle across Windows macOS iOSiPadOS Android and Linux platforms 
 Develop and maintain the organizations application lifecycle management strategy standards governance model and roadmap Own the endtoend application lifecycle including request intake packaging testing deployment updates patching retirement and replacement planning Design and implement scalable software distribution and application management frameworks utilizing technologies such as Microsoft Intune Jamf Pro Tanium Microsoft Store Apple Business Manager and related platforms Establish application packaging standards deployment methodologies version control practices and release management processes Lead efforts to modernize application delivery through selfservice portals automated deployments enterprise app stores and zerotouch provisioning workflows Partner with Business Application Owners Information Security Procurement Vendor Management and IT Operations teams to assess application requirements and deployment strategies Develop governance processes for software approval lifecycle reviews application rationalization and retirement planning Drive application portfolio optimization initiatives by identifying redundant obsolete unsupported or underutilized applications Establish and maintain enterprise standards for application compatibility testing certification and operating system readiness validation Ensure businesscritical applications remain compatible with operating system upgrades security baselines and endpoint management standards Define and oversee application update and patch management strategies to improve security posture and application reliability Evaluate and recommend modern application deployment technologies and methodologies that improve operational efficiency and enduser experience Create and maintain dashboards and reporting metrics related to application inventory deployment success rates software compliance application health and lifecycle status Lead enterprise application migration consolidation and modernization initiatives