Endpoint Engineer Jobs in Tennessee (NOW HIRING)

DPR is seeking a highly skilled and forward-thinking Lead Endpoint Engineer - Apple Platform & Modern Device Management to establish, secure, and scale the enterprise Apple ecosystem across the organization.

This role serves as the technical owner of DPR's Apple platform strategy and is responsible for the architecture, deployment, security, compliance, lifecycle management, and ongoing evolution of macOS devices within a Microsoft-centric environment. The ideal candidate will combine deep Apple expertise with strong knowledge of Microsoft technologies, ensuring Apple devices are seamlessly integrated with Microsoft Intune, Entra ID, Defender for Endpoint, Conditional Access, and other enterprise services.

This is a hands-on engineering role that combines strategy, architecture, and execution. The successful candidate will define enterprise standards, implement automation, improve user experience, and continuously evaluate emerging technologies, including Intune, Jamf and other Apple management solutions, to ensure DPR maintains a secure, scalable, and modern endpoint management platform.

This role plays a critical part in enabling workforce productivity while maintaining enterprise-grade security, compliance, and operational excellence.

• Serve as the technical owner for DPR's Apple ecosystem and endpoint strategy.
• Define and maintain enterprise standards for macOS devices.
• Develop and maintain the Apple platform roadmap.
• Evaluate and recommend endpoint management architectures, including Intune, Jamf, and emerging Apple management technologies.
• Provide technical leadership on Apple platform adoption and modernization initiatives.
• Ensure Apple platform capabilities align with DPR's security, compliance, and operational objectives.

• Administer and optimize Apple Business Manager (ABM).
• Design and maintain zero-touch deployment processes.
• Manage device enrollment, provisioning, configuration, and retirement processes.
• Develop and maintain macOS configuration profiles and compliance policies.
• Implement and maintain software deployment and patch management solutions.

• Integrate Apple devices with Microsoft Intune and Microsoft Entra ID.
• Implement and maintain Platform SSO and modern authentication solutions.
• Support Conditional Access and device compliance policies.
• Collaborate with Identity & Access Management teams to strengthen device trust and security posture.
• Support certificate-based authentication and password less initiatives.

• Develop and maintain macOS security baselines.
• Implement and manage File Vault encryption standards.
• Deploy and optimize Microsoft Defender for Endpoint.
• Ensure compliance with corporate security policies and regulatory requirements.
• Monitor endpoint compliance and remediation activities.
• Align Apple security standards with NIST, CIS Benchmarks, and DPR security requirements.
• Participate in security reviews, audits, and compliance assessments.

• Develop automation to streamline deployment, compliance, reporting, and lifecycle management processes.
• Leverage scripting and APIs to improve operational efficiency.
• Reduce manual provisioning and support activities through automation.
• Develop monitoring and reporting solutions for Apple endpoint health and compliance.

• Improve the end-user Apple experience through standardization and automation.
• Partner with Service Desk and Endpoint Engineering teams to reduce support complexity.
• Evaluate emerging Apple technologies and features that improve productivity and security.
• Act as a senior escalation point for complex Apple-related technical issues.

• Establish and maintain Apple platform standards, procedures, and documentation.
• Develop operational metrics and dashboards related to enrollment, compliance, security, and lifecycle management.
• Conduct regular reviews of platform effectiveness and identify improvement opportunities.
• Continuously assess whether current management platforms adequately support DPR's Apple environment and recommend enhancements where appropriate.

• Deep expertise in enterprise macOS administration and architecture.
• Strong experience with Microsoft Intune and endpoint management.
• Strong understanding of Microsoft Entra ID, Conditional Access, and device compliance.
• Experience with Apple Business Manager and Apple enrollment technologies.
• Knowledge of Platform SSO and Apple identity integration.
• Experience implementing endpoint security controls and compliance programs.
• Familiarity with Jamf Pro or other Apple-focused management platforms.
• Experience with endpoint automation, scripting, and API integrations.

• Strong understanding of endpoint security principles and modern device management.
• Experience implementing FileVault, EDR/XDR solutions, and security baselines.
• Familiarity with NIST Cybersecurity Framework, CIS Benchmarks, and enterprise security practices.
• Experience supporting audit and compliance activities.

• Ability to influence technical direction and platform strategy without direct authority.
• Strong stakeholder engagement skills across Security, Infrastructure, Identity, Procurement, and End User Services.
• Ability to translate technical concepts into business value and operational outcomes.
• Strong documentation and communication skills.

• Strong troubleshooting and root-cause analysis capabilities.
• Ability to assess technology gaps and recommend scalable solutions.
• Data-driven decision-making and continuous improvement mindset.

• Bachelor's degree in Information Technology, Computer Science, Information Systems, or related field, or equivalent experience.
• 5+ years of endpoint engineering experience.
• 3+ years of enterprise macOS administration experience.
• Strong experience with Microsoft Intune and Microsoft Entra ID.
• Experience with Apple Business Manager.
• Experience supporting enterprise endpoint security controls.
• Experience designing and implementing endpoint standards and lifecycle processes.

• Experience administering Jamf Pro.
• Apple Device Support or Apple Deployment & Management certifications.
• Microsoft Intune Administrator certification.
• Microsoft Security Administrator certification.
• Experience operating Apple environments at enterprise scale.
• Experience with automation and scripting (Bash, Python, PowerShell, APIs).

• Reports to: Manager, Endpoint Engineering (or equivalent).
• Partners with: Cybersecurity, Identity & Access Management, Infrastructure, Service Desk, Procurement, Enterprise Architecture, and Collaboration Services.
• Serves as the technical owner of DPR's Apple platform and endpoint management strategy.
• Functions as a senior technical lead and subject matter expert for Apple technologies across the enterprise.

DPR Construction is a forward-thinking, self-performing general contractor specializing in technically complex and sustainable projects for the advanced technology, life sciences, healthcare, higher education and commercial markets. Founded in 1990, DPR is a great story of entrepreneurial success as a private, employee-owned company that has grown into a multi-billion-dollar family of companies with offices around the world.

Working at DPR, you'll have the chance to try new things, explore paths and shape your future. Here, we build opportunity together-by harnessing our talents, enabling curiosity and pursuing our collective ambition to make the best ideas happen. We are proud to be recognized as a great place to work by our talented teammates and leading news organizations like U.S. News and World Report, Forbes, Fast Company and Newsweek.

Explore our open opportunities atwww.dpr.com/careers.