Endpoint Automation Engineer 2
hace 2 días
Seal Beach
Job DescriptionJob SummaryThe Endpoint Automation Engineer 2 designs, implements, and manages automated solutions for user endpoints—including desktops, laptops, mobile devices, and peripherals—across on-premises and cloud environments. This position focuses on streamlining software deployment, patch management, configuration, and system maintenance to ensure secure, efficient, and reliable endpoint operations with minimal user disruption.Leveraging tools such as Microsoft Intune, Tanium, ServiceNow, and open-source workflow automation platforms (along with PowerShell and Python scripting), this position automates endpoint management and vulnerability remediation. The Endpoint Automation Engineer 2 collaborates closely with ITS and Security teams to enhance compliance, strengthen the organization’s security posture, and drive operational efficiency through scalable, automated solutions.Essential Duties • Develop, maintain, and optimize automation scripts using PowerShell, Python, or other scripting languages to streamline software deployment, workstation imaging, configuration, and repetitive administrative tasks., • Design and develop innovative open-source workflow automation systems to connect, optimize, and automate processes across multiple platforms and services., • Design and maintain automated workflows for device provisioning, patch management, system configuration and day-to-day tasks across Service Desk environment., • Utilize endpoint management tools (e.g., Intune, Tanium) and automation frameworks to enhance operational efficiency, consistency, and compliance., • Integrate ServiceNow with endpoint management platforms to enable unified automation, reporting, and incident response, • Monitor automated processes for failures, perform root cause analysis, and implement corrective actions to ensure reliability., • Monitor and maintain assigned support tickets daily, ensuring adherence to SLAs for response, escalation, and resolution based on severity and priority., • Provide advanced technical support to the Service Desk for endpoint-related issues beyond Service Desk Tech capabilities., • Manage the full lifecycle of Windows endpoints—including provisioning, configuration, maintenance, upgrades, and de-provisioning., • Administer and troubleshoot enterprise platforms such as Active Directory (on-prem and Entra ID), Group Policy, Windows Enterprise, Microsoft 365, and Intune from an endpoint perspective., • Configure, maintain, and update system images and baseline configurations in alignment with IT policies and management directives., • Responsible of high-priority (“Zero-Day”) vulnerabilities and security patches across Windows and third-party applications., • Ensure adherence to departmental Standard Operating Procedures, checklists, and standardization practices., • Analyze endpoint infrastructure performance, scalability, and redundancy; produce reports and benchmarks to guide optimization efforts., • Develop and maintain technical documentation, scripts, and configuration standards to support consistency and knowledge sharing., • Maintain hardware and software efficiency through continuous monitoring, upgrades, and lifecycle management., • Assist in building and maintaining a Generative AI–powered knowledge base that serves as a user self-help and IT support portal., • Work closely with vendors and internal stakeholders to coordinate deployments, resolve escalations, and support bank-wide IT projects., • Provide technical training and mentorship to IT team members and bank associates., • Participate in on-call rotation to provide after-hours support and ensure endpoint stability and security. Complies with all State and Federal Banking regulatory requirements, including but not limited to: BSA, Anti-Money Laundering OFAC, CIP, Financial Elder Abuse Reporting, Sexual Harassment, Information Security and privacy requirements. This position will elevate suspicious activity to supervisory staff and/or BSA department. Completes compliance and other technical training workshops as assigned. Basic Knowledge, Skills and Abilities • Strong proficiency in PowerShell, Python, Regex, JSON / XML Parsing and workflow automation tools., • Working knowledge of automation frameworks and experience integrating solutions across hybrid cloud environments (Azure, AWS, on-premises)., • Hands-on experience with EMP, EMSP, UEM, MDM (e.g., Intune & Tanium), Active Directory, and Azure in hybrid environments., • Strong expertise in endpoint security, vulnerability assessment, and compliance management aligned with Windows Enterprise standards and best practices., • Excellent analytical, communication, and collaboration skills across technical and non-technical teams. Officer Title Eligibility For qualified positions, the Bank may designate an Officer Title to an employee who seeks and/or meets defined competencies for an eligible position. This position qualifies for the officer title(s) Assistant Vice President. Competencies To perform the job successfully, the following must be demonstrated: • Attitude – Demonstrate a positive “can do” attitude; show motivation; must be goal oriented and a self-starter; be “solution-minded” rather than “problem-minded”, • Work Ethic – Must be dedicated, responsible, hard-working, and a team player, • Oral Communication – Speak clearly and persuasively in positive or negative situations; listen and get clarification; respond well to questions; demonstrate group presentation skills; participate in meetings, • Written Communication – Write clearly and informatively; edit work for spelling and grammar; vary writing style to meet needs; able to read and interpret written information, • Bank Support – Follow policies and procedures; support the Bank’s mission, goals, and values, • Quality Management – Look for ways to improve and promote quality; demonstrate accuracy and thoroughness, • Diversity – Demonstrate knowledge of the Banks Diversity policy; show respect and sensitivity for cultural differences; educate others on the value of diversity; promote a harassment-free environment; build a diverse workforce, • Teamwork – Balance team and individual responsibilities; exhibit objectivity and openness to others' views; give and welcome feedback; contribute to building a positive team spirit; put success of team above own interests; able to build morale and group commitments to goals and objectives; support everyone's efforts to succeed, • Judgment – Display willingness to make decisions; exhibit sound and accurate judgment; support and explain reasoning for decisions; include appropriate people in decision-making process; make timely decisions, • Professionalism – Approach others in a tactful manner; react well under pressure; treat others with respect and consideration, regardless of their status or position; accept responsibility for own actions; follow through on commitments, • Safety and Security – Observe safety and security procedures; determine appropriate action beyond guidelines; report potentially unsafe conditions; use equipment and materials properly. Use carts, hand trucks, lift belts and other tools when transporting heavy objects., • Adaptability – Adapt to changes in the work environment; manage competing demands; change approach or method to best fit the situation; able to deal with frequent changes, delays, or unexpected events, • Attendance and Punctuality – Be consistently at work and on time; ensure work responsibilities are covered when absent; arrive at meetings and appointments on time, • Dependability – Follow instructions, respond to management direction; take responsibility for own actions; keep commitments; commit to long hours of work when necessary to reach goals; complete tasks on time or notify appropriate person with an alternate plan, • Innovation – Display original thinking and creativity; meet challenges with resourcefulness; develop innovative approaches and ideas Education and Experience • Minimum of 10 years of experience in Service Desk Support and Systems Administration with desktop and server support in a business environment, • Minimum of 10 years of experience deploying configuration policies with Active Directory (GPO's, security groups, Windows firewall settings, etc.), Microsoft Intune, and MDM products, • Expert level proficiency with Microsoft Windows products (10+ years), • Requires high-level proficiency automating system administration using Microsoft PowerShell, • Extensive hands on experience with supporting and automating the distribution and configuration of Windows PC applications and mobile apps to Apple devices, • Extensive experience with a major Endpoint Management Platforms (KACE, SCCM, Big Fix, Tanium, etc.), • Experience with deploying applications and client configurations using major virtual desktop platforms: VMware View, Citrix, Microsoft RDS, • Senior level experience with Application support, security, and technical documentation, • Experience support Cloud-based SAAS solutions, such as Microsoft M365, Azure VDI, • 5+ years of experience in ITIL Framework required., • Candidates holding the following industry standard certifications are preferred: Microsoft Solutions Associates ITIL Foundation, MCP, Azure Professional, Security+, VMware, Service NowPhysical Requirements & Work Environment, • Requires repetitive movement, • Requires travel to branch locations, • Requires sitting for prolonged periods of time., • Requires lifting up to 50 lbs., • Requires using hands to handle, control or feel objects, hearing, speaking, bending, squatting, and speaking., • Office setting w/controlled temperature., • Proper at-home work setup for remote work capabilitiesAdditional Requirements, • Professional business attire, • Ability to work evenings, weekends and holidays as needed As a part of the Bank’s internal control systems, employees holding sensitive positions are required to be absent from their duties for a minimum of two consecutive weeks each year. This position has been deemed to meet the test for a sensitive position, and therefore you will be required to meet the minimum absence requirement each and every year. This job description is not intended to be all-inclusive, and employees will be required to perform additional related work duties as assigned by their immediate supervisor and/or management. Farmers and Merchants Bank of Long Beach reserve the right to revise or change job duties and responsibilities as the need arises. This job description does not constitute a written or implied contract of employment. November 20, 2025