Sr Systems Engineer (Microsoft 365 Collaboration Platforms)
Lennar
- Location
- Miami, FL (Job Posting Location)
- Work model
- On-Site
- Level
- Senior
- H-1B history
- 6 approvals (FY2023)
- Posted
- Aug 17, 2026
Skills
About this role
Senior Systems Engineer Endpoint Engineering We are Lennar Lennar is one of the nation’s leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the Uni ted States. A Career that Empowers You to Build Your Future The Senior Endpoint Engineer leads the planning, implementation, administration, and support of enterprise endpoint management systems and virtual desktop infrastructure (VDI) serving over 12,000 geographically distributed endpoints across Windows, macOS, iOS, Android, and other devices. The role serves as a technical leader, mentor, and subject matter expert, ensuring secure, well-managed, and high-performing endpoints across the enterprise. Your Responsibilities on the Team Endpoint Engineering & Management Administer and optimize Microsoft Intune for modern device management across Windows, macOS, iOS, and Android, including enrollment, configuration and compliance policies, app deployment, and Windows Autopilot zero-touch provisioning at scale. Manage Virtual Desktop Infrastructure (VDI) environments, including Azure Virtual Desktop (AVD), Citrix, or VMware Horizon, ensuring high availability, performance, and a consistent user experience for remote and hybrid workers. Develop and maintain endpoint security baselines, CIS benchmarks, and hardening standards, partnering with security and infrastructure teams to enforce Microsoft Defender for Endpoint, BitLocker encryption, and data loss prevention (DLP) policies. Oversee endpoint patching and software update management using Intune, MECM/SCCM, or equivalent tooling, ensuring timely remediation of vulnerabilities across the fleet. Manage application packaging, deployment, and lifecycle for enterprise endpoint software, including scripting and automation using PowerShell or similar tools. Monitor endpoint health, compliance posture, and fleet performance using telemetry and reporting, proactively remediating issues before they impact end users. Support BYOD and corporate device programs, including enrollment, conditional access enforcement, and data separation policies via Intune App Protection Policies (APP). Identity & Access (Endpoint Focus) Administer Conditional Access policies, RBAC, and compliance enforcement via Microsoft Entra ID and Intune, ensuring devices meet security baselines before accessing corporate resources. Support joiner/mover/leaver lifecycle workflows from an endpoint provisioning and deprovisioning perspective, including Autopilot enrollment and device wipe/retire. Strategic Initiatives Partner with network engineering, application, security, and business teams to translate complex business requirements into scalable, reliable endpoint solutions aligned with corporate objectives and enterprise architecture standards. Mentor junior engineers on endpoint management, device security, and automation best practices, and serve as a senior technical resource for project planning and high-priority escalations. Research and evaluate emerging technologies across endpoint management, VDI, and device security; present findings and strategic recommendations to leadership. Develop and maintain system documentation, runbooks, standard operating procedures, and engineering best practices.
Requirements
Bachelor’s degree in Computer Science , Information Technology, or related field. 7+ years of experience in systems engineering, enterprise environments, and endpoint platform administration. Demonstrated experience with Microsoft Intune / Microsoft Endpoint