Endpoint Systems Engineer Jobs

Year Round

AUTHENTICITY | PASSION | COMMUNITY | INNOVATION | ADVENTURE

Alterra Mountain Company is a family of 16 iconic year-round resorts, the world’s largest heli-skiing operation, and Ikon Pass - the premier ski and snowboard season pass offering access to more than 50 iconic mountain destinations around the world.

Headquartered in Denver, Colorado and born out of a shared love of the mountains and adventure, the company has brought together some of the world’s most aspirational brands, including: Steamboat and Winter Park in Colorado; Palisades Tahoe, Mammoth Mountain, June Mountain, Big Bear Mountain Resort and Snow Valley Mountain Resort in California; Stratton Mountain and Sugarbush Resort in Vermont; Snowshoe Mountain in West Virginia; Tremblant in Quebec and Blue Mountain in Ontario, Canada; Crystal Mountain in Washington; Deer Valley Resort and Solitude Mountain Resort in Utah; and CMH Heli-Skiing & Summer Adventures in British Columbia. Also included in the portfolio is Alpine Aerotech, a worldwide helicopter support and maintenance service center in British Columbia, Canada and Aspenware, the ski industry leader in technology services and e-commerce, and Ski Butlers, the global leader in ski and snowboard rental delivery.

A career with Alterra Mountain Company is more than what you do today; it’s being part of creating a community rooted in the spirit of the mountains, united by a passion for adventure, and celebrating the legendary adventures and enduring memories that mountains bring to everyone.

BESIDES WORKING SOMEWHERE AWESOME, WHAT’S IN IT FOR YOU?

• Flexible/hybrid workplace policy empowering employees to work from home while encouraging regular in-person collaboration in our dog-friendly company headquarters office located in Denver’s RiNo Art District neighborhood
• 401(k) plan with generous company match
• Medical, dental, vision, life, AD&D, short term & long-term disability insurance, EAP, HSAs, FSAs, and more
• Paid parental leave of up to 6 weeks for eligible employees
• Free Ikon Pass for all eligible employees, with additional free skiing + riding privileges across the family of Alterra Mountain Company resorts for all eligible employees and their dependents
• Discounted tuition with partner online university for all Alterra Mountain Company employees to further their education
• Discounted skiing + riding for friends and family of eligible employees across the family of Alterra Mountain Company Resorts
• Flexible Time Off (FTO) and Paid Time Off (PTO) policies for eligible employees to rest, relax and recharge
• Generous discounts on outdoor gear, apparel, rental cars, etc.
• Commuter benefits (Denver employees only)

For information on Alterra Mountain Company’s Social Responsibility work including our Diversity, Equity, & Inclusion actions, please see our webpage at www.alterramtnco.com/social-responsibility. Among other resources, Alterra has Employee Resource Groups to support the BIPOC (Black, Indigenous, and people of color), disability, LGBTQIA2S+, and women communities within our workforce.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily with or without reasonable accommodations.

Position Summary

The Endpoint Systems Engineer is a key contributor of the Enterprise Architecture and Engineering team. The successful candidate will provide prescriptive technical guidance and exercise leadership in best practices-focused design, implementation, and support of configuration management standards for the holistic management of all enterprise managed endpoints across a broad and complex multi-domain environment improving efficiency, security, and employee experiences. The ideal candidate will help lead the development of strategy and detailed technical design of automation platforms that standardize device baseline configuration and ongoing configuration management to provide a consistent, yet agile, ecosystem leveraging a number of cloud and on-prem technology platforms. Most importantly, this role will collaborate with a community of peers to develop robust automated processes and frameworks to be utilized by front-line IT teams to accelerate deployment, patching, feature releases, and standardized configuration of Windows, MacOS, and mobile device platforms (Android and IOS).

Essential Duties

General Responsibilities:

• Responsible for timely delivery of projects as assigned by the Sr. Mgr of Enterprise Architecture.
• Utilize a data-driven, objective approach to inform decision-making, and provide and maintain clearly written documentation for technical and/or nontechnical teams, including support documentation for the helpdesk and application development teams.
• Design and develop standardized deployment configurations and automated enrollment in MDM platforms for IOS and Android devices, including hardening and secure network configuration for PCI and other regulated or high-security use cases.
• Develop and maintain baseline images, ongoing configuration, and management of software package deployments to Windows and Mac OS endpoint devices, based on established designs and standards.
• Identify and analyze functional and operational requirements of Enterprise Projects having endpoint device considerations, making design/solution recommendations aligned with IT Security and other operational standards to ensure all requirements are met.
• Act as a SME in cooperation with other Configuration Management, IAM, and IT Security experts to define device governance and vulnerability management standards in support of Alterra’s Zero Trust program.
• Develop custom automation, scripting, and Infrastructure as Code constructs to modernize and optimize device management across a broad range of use cases.
• Collaborate with members of resort IT teams to discover new areas to automate/ improve efficiency of operations, and act as point of escalation for both internal customers (resort and enterprise applications) and departmental issues and incidents.
• Envision, design, develop, and maintain management solutions for Windows, Mac, and mobile device platforms embracing the latest in modern device configuration management standards and best practices including cloud/hybrid management architecture and highly performant automations.
• Work closely with IT Security to understand and enforce standards (like disc encryption and applied CIS controls), detect configuration drift, and remediate vulnerabilities on all managed endpoints in compliance with the enterprise’s Vulnerability Management policy.

Travel Required

☒ Yes

☐No

Travel details (if required):

Occasional travel to our mountain resort locations to support and establish working relationships for collaboration.

Competencies & Job Requirements

Required:

• Expert-level knowledge of both administration and migration to Azure AD based endpoint management via Intune, including AutoPilot and Managed Catalog Policies (including source AD GPO management), and Bitlocker Drive Encryption.
• Expert-level knowledge and experience with Windows workstation management, imaging, deployment, lifecycle maintenance, and mobility services management.
• Expert-level knowledge and experience in PowerShell Scripting and advancing Infrastructure-as-Code principles.
• Expert-level proficiency in deployment and updates/patching both from cloud and on premises using technologies such as Intune, JAMF, SCCM, WSUS, OSD, App Packaging, AGPM, DSC.
• Advanced knowledge supporting Apple and Android mobile devices including standardized deployment and configuration management using Intune and JAMF.

Preferred:

• Functional Knowledge of Role Based Access Control (RBAC), Least Privileged Access, and network fundamentals (firewalls, routing, switching, DNS, DHCP).
• Advanced knowledge and experience with Windows Server operating systems, server roles, lifecycle management.
• Advanced knowledge and recent experience with Azure Active Directory (AAD, MFA, PIM, B2B).
• Advanced knowledge and experience with Active Directory management functions (Schema and Attribute design purpose, OU Structure, Security Group management, Admin Access management, Certificate Management via PKI, Multidomain trusted environments).

Education & Experience

Required:

• Bachelor’s Degree in Computer Science, Engineering, or related field; or the equivalent in education and work experience.

Work Experience

Required:

• 3+ years of specific experience in Directory Services technology administration.
• 2+ years of recent experience in managing large scale endpoint environments, with specific demonstrated expertise in both Azure AD and Intune.
• 5+ years of general broad experience in enterprise-class Systems Administration, with demonstrated growth in scale/scope of responsibility to include large-scale, hybrid environments.

Preferred:

• Demonstrable ITSM experience is preferred. Including experience with Change management, SLA commitments, and Knowledge management.

LICENSES & CERTIFICATIONS

Required:

• ITIL v3 Foundations certification or equivalent demonstrable ITSM experience is preferred.
• Certified MS or AZ Roles, or equivalent experience in Azure and Microsoft technologies

Preferred:

• Advanced specific training or education in Azure AD, Intune, or Entra
• Other certifications in an Infrastructure Discipline/Role (MS, AZ, MD) or equivalent certifications/training as appropriate (AWS, Citrix, VMware, etc)

The base salary range below represents the low and high end of the Alterra Mtn Co Shared Services Inc. salary range for this position. Actual salaries will vary and may be above or below the range based on various factors including but not limited to experience, education, training, location, merit system, quantity or quality of production, responsibilities, and regular and/or necessary travel. The range listed is just one component of Alterra Mtn Co Shared Services Inc.’s total compensation package for employees. Other rewards may include short-term and long-term incentives and many region-specific benefits.

Denver area base salary range: $85,000 - $128,000 per year

Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to walk, talk, see, hear, and operate a computer and other office productivity machinery.

WORKING CONDITIONS

Indoor/Outdoor: While performing the duties of this job, the employee may be exposed to harsh and varying outside weather conditions.

Hazardous Materials/Noise: The noise level in the work place is usually moderate.

This job description is not an exhaustive list of all functions and responsibilities that an employee may be required to perform in this position. Alterra Mtn Co Shared Services Inc. and its affiliates reserve the right to modify, increase, decrease, suspend, and or eliminate any of the essential duties and/or the position in its entirety.

This job description is not an express or implied contract, guarantee, promise, or covenant of employment for any set term or duration, or for termination only for cause.

Employment with Alterra Mtn Co Shared Services Inc. or any of its affiliates is “at will” meaning either party may terminate the employment relationship at any time with or without cause and with or without notice.

This position is located in Colorado, and the work is primarily in Denver, CO and, as such, employment in this position is subject to the labor and employment laws of the state of Colorado.

Alterra Mtn Co Shared Services Inc. and its affiliates are equal opportunity employers and maintain drug-free workplaces. All employees and candidates are reminded that Alterra Mtn Co Shared Services Inc. and its affiliates adhere to all applicable labor and employment laws, and State, County, and City-specific labor and employment regulations, where applicable.