Cpe endpoint engineer

About Enterprise:

The cliente is a leading provider of nearshore staff augmentation services headquartered in New York. For over two decades, we’ve been delivering top-tier technology solutions to companies of all sizes, from innovative startups to industry leaders, helping them achieve their digital transformation goals.

Our team of 600+ highly skilled tech professionals, based in Latin America, drives digital disruption by partnering with U.S. companies on their most impactful projects. Whether collaborating with Fortune 500 giants or scaling startups, we deliver results that make a difference.

We are seeking a CPE Endpoint Engineer to manage, administer, and scale our global fleet of client devices across multiple platforms, including macOS, Windows, ChromeOS, iOS, iPadOS, and Android. This role involves maintaining software distribution, patch management, security, and endpoint configuration while collaborating with multiple teams to ensure seamless device operations.

Endpoint Management & Support:

• Oversee the administration and scaling of client endpoint devices globally.
• Provide Tier 2 support for software distribution, configuration, and patching services on desktops and laptops.
• Interface with Service Desk, Infra Ops teams, and CPE Engineering to resolve endpoint-related issues.
• Ensure connectivity, configuration, and security compliance of all managed endpoints.
• Support problem determination and resolution by working with third-party services and vendors.
• Respond to and help mitigate security incidents such as malware, vulnerabilities, and zero-day attacks.

Software Distribution & Deployment:

• Manage and troubleshoot automated software distribution across all supported platforms.
• Implement software deployment policies and procedures using the client's software distribution tools.
• Maintain and troubleshoot automated installation scripts (Ruby, Go, Powershell, Python).
• Ensure successful application deployments using Gorilla (Windows) and other relevant tools.

Image Management & Automation:

• Develop and maintain standard OS images with performance optimizations.
• Automate image management processes using tools such as Cookbooks, Python, Ruby, or Bash scripts.
• Maintain compliance with image management policies and document any deviations.
• Support remote troubleshooting for configuration and deployment issues.

Patch Management & Compliance:

• Review and classify security and hotfix patches based on IT policies.
• Deploy patches using the client's tools while adhering to change management procedures.
• Provide monthly patch compliance reports and work to improve patch deployment efficiency.
• Troubleshoot and resolve agent-related issues affecting patching compliance.
• Roll back patches when necessary, following internal approval processes.

Monitoring & Documentation:

• Utilize monitoring and reporting dashboards to track endpoint fleet performance.
• Maintain detailed documentation of processes, standards, and environment configurations.
• Act as an escalation point between support teams and engineering for client platform issues.

• To be based in São Paulo, Brazil, with a willingness to work on-site three days per week.
• Advanced written and verbal communication skills in English are required.
• Experience with endpoint management, software deployment, or IT support roles.
• Strong expertise with WorkspaceONE MDM and Microsoft Intune MDM.
• Proficiency in managing macOS, Windows, iOS, Android, and ChromeOS.
• Experience with Munki, Gorilla, and software packaging/deployment.
• Intermediate knowledge of Group Policy, LDAP, Kerberos, DNS, DHCP, TCP/IP.
• Ability to write and maintain automation scripts in Ruby, Python, and PowerShell.
• Strong troubleshooting skills for endpoint security, configuration, and connectivity issues.
• Work closely with cross-functional teams including Service Desk, Infra Ops, Security, and CPE Engineering.
• Engage with external vendors and third-party service providers to support endpoint solutions.