Configuration Associate Jobs in Colorado (NOW HIRING)

EP Wealth Advisors (EPWA) is a wealth management advisory firm with over $49.1 billion as of June 30, 2026, serving predominately high net worth individuals. EPWA fosters an inclusive environment that offers opportunities for our associates to learn, grow and enhance their skills to take on new challenges to progress in their professional careers.

We are hiring a Systems Engineer, Endpoint & Network Operations to help build and operate the endpoint, branch infrastructure, and connectivity foundation for a growing, cloud-based wealth management firm. This role serves as the technical platform owner for endpoint engineering and patch management, supports branch network reliability, and acts as an engineering resolver for issues beyond front-line support. The role will help standardize office technology patterns, improve monitoring and automation, support M&A and new-office cutovers, and partner closely with Cloud & Identity, Service Desk, Cybersecurity, and Integration teams to keep EP Wealth's distributed office environment secure, connected, and reliable.

Duties and Responsibilities

Endpoint Engineering

• Serve as the technical platform owner for core endpoint platforms, including Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar) - covering day-to-day configuration, platform health, and administration. The employee-facing service experience remains with the Service Desk; this role owns the underlying platform.
• Configure and maintain endpoint deployment profiles and provisioning workflows, including application packaging, deployment, and application push/self-service distribution through Microsoft Company Portal.
• Own the enterprise patch and update strategy across the endpoint fleet, including patch cadence, testing, and rollout.
• Support endpoint security baselines and compliance policies in partnership with the CISO and the cybersecurity team.
• Perform engineering-level troubleshooting and remediation for endpoint platform issues (Intune, Autopilot, and patch management) that require configuration, systemic, or vulnerability-level correction - not routine end-user issues, which remain with the Service Desk.
• Build and maintain endpoint automation (e.g., PowerShell, Intune remediation scripts) to reduce manual effort and recurring issues.

Network & Branch Office Support Engineering

This role helps build and operate EP Wealth's branch reliability model, including proactive monitoring, technical acceptance standards, recurring issue remediation, vendor escalation, and post-cutover stabilization for new offices, office moves, and acquired partner integrations.

• Configure and support network infrastructure for branch offices, including routing, switching, wireless, and SD-WAN/firewall platforms.
• Support the migration of branch office networking, camera, and digital access systems from Meraki and Netgear to Ubiquiti as part of the Office of the Future initiative, as EP Wealth's new branch networking standard.
• Support adherence to branch network standards and configuration requirements set by engineering leadership.
• Coordinate the technical work of third-party vendors performing physical rack-and-stack activities and assist with remote configuration.
• Support carrier and network vendor technical escalation for connectivity issues.
• Support branch monitoring, telemetry, and the branch uptime/reliability dashboard, and contribute to remediation of recurring connectivity issues.
• Travel to branch offices (~25%, Regional) to support new-office network builds, on-site remediation, and technical validation, including M&A integration cutovers.
• Support the network and connectivity workstream for partnership integrations, including access configuration, cutover support, and post-cutover stabilization.

Systems Administration

• Support Microsoft 365, Entra ID, and Azure administration, including Conditional Access, MFA, and PIM configuration, in partnership with the Microsoft Cloud & Identity platform team.
• Maintain detailed documentation of system and network configurations, procedures, and troubleshooting/runbooks.
• Support major incidents and emergency outages in accordance with business continuity and disaster recovery plans.
• Support vendor management for assigned endpoint and network platforms and contracts.

Tier 3 Escalation, Reliability & Change

• Serve as the engineering-level escalation point for endpoint, network, and patch management issues that exceed Service Desk / Tier 1-2 capability - handling escalations that require engineering diagnosis, configuration, remediation, or systemic correction, not general front-line overflow.
• Perform root-cause analysis and drive down recurring incidents through remediation and automation.
• Provide technical risk assessment, implementation planning, and rollback planning for changes within scope, in line with EP Wealth's technical change authority model.
• Support the implementation and operation of technical security controls on endpoint and network platforms, in partnership with the CISO and the cybersecurity team.

Qualifications

• This role is classified as hybrid and requires the employee to perform work both remotely and from the designated office location within the applicable market identified in this job posting. Candidates must reside within a reasonable commuting distance of the listed office location.
• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent experience (preferred).
• 5+ years of experience in systems administration, endpoint engineering, or network engineering in a corporate/enterprise environment, with demonstrated Tier 3-level ownership. Experience in multi-site environments, M&A, or distributed branch operations preferred.
• Endpoint platform experience: hands-on experience administering Microsoft Intune, Windows Autopilot, and enterprise patch management tooling (e.g., Action1, PatchMyPC, or similar), including application push/deployment via Microsoft Company Portal.
• Identity & Microsoft 365: working knowledge of Microsoft Entra ID (Conditional Access, device compliance, identity lifecycle) and the Microsoft 365 suite.
• Network engineering: experience with routing, switching, wireless, and firewall/SD-WAN platforms, including supporting multi-site or branch office environments. Ubiquiti experience strongly preferred, as it is EP Wealth's emerging branch office networking standard; Meraki or Netgear experience is also valuable during the transition period.
• Cameras & digital access: experience with IP camera/video surveillance and digital access control (door entry) systems, ideally within the Ubiquiti ecosystem (e.g., UniFi Protect, UniFi Access) or similar.
• Experience serving as an engineering-level escalation resource for endpoint, network, or patch management issues (not general front-line ticket overflow).
• Azure cloud experience (networking, Azure AD/Entra ID).
• PowerShell scripting or similar automation experience.
• Experience executing in an ITIL change-management-focused environment.

Certifications (preferred, not required)

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• URSCA (UniFi Routing, Switching & Cybersecurity Admin) or UWA (UniFi Wireless Admin), or CCNA/Cisco Meraki certification
• ITIL v4 Foundation

Additional Qualifications

• Willingness and ability to travel approximately 25% (Regional), with occasional national travel for team working sessions or company events. 
•  Excellent problem-solving, troubleshooting, and written documentation skills.
• Comfortable operating with significant autonomy as a technical escalation resource across distributed offices.
• Strong communication skills; able to work cross-functionally with the Service Desk, Cloud & Identity, and Security teams.
• Team Player - shares wins and successes; fosters open dialogue; acts as if real success is the success of the whole team.
• Curious - willing to learn and research; learns quickly when facing new problems; enjoys the challenge of unfamiliar tasks.
• AI-Enabled - explores and leverages approved AI tools (e.g., ChatGPT, Claude) to accelerate scripting, documentation, troubleshooting, and knowledge capture.

$110,000 - $125,000 a year

What We Offer

We offer a highly competitive suite of holistic benefits designed to help our team members balance their personal and professional life commitments. These include options designed to encourage employee's health, happiness, and financial well-being.

• 11 Paid Holidays
• 3 Weeks (PTO)
• Paid Volunteer Time
• Paid Parental Leave
• Flexible Work Schedule
• Highly subsidized Health, Dental, and Vision Plans
• 401k Retirement Account with company match contributions
• Free Mental Health services, Life Insurance, Long & Short-Term Disability Insurance
• Flexible Spending Accounts and Health Savings Accounts
• Employee Financial Education
• Employee Educational Expense Reimbursement
• Employee Charitable Donations
• Employee Referral Incentives
• Employee Team Building Activities
• Employee Assistance Program
• Mentorship Program

EPWA is an equal opportunity employer. Prospective employees will receive consideration without discrimination because of race, creed, color, sex, gender, gender expression, gender identity, sexual orientation, age, religion, national origin, ancestry, mental disability, physical disability, medical condition, genetic information, marital status, military and veteran status, or any other basis protected by law.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. EP Wealth Advisors may use an AI-enabled interview assistant during your interview to transcribe and summarize the conversation for recruiting and interview documentation purposes. The transcript and summary may be reviewed by EP Wealth Advisors personnel involved in the hiring process. AI tools support human review and do not make final hiring decisions. You may opt out of use of the AI interview assistant. If you opt out, the AI assistant will not join the interview, and your decision will not negatively affect your candidacy. If you need a reasonable accommodation or alternative process, please contact [email protected].