The Role:

At Fanatics, technology enables speed, scale, and a great employee experience. We’re looking for a hands-on IT Endpoint Engineer to help deliver a secure, modern, and reliable endpoint environment across Windows, macOS, and mobile devices.

In this role, you’ll own the day-to-day management of our endpoint platforms, ensuring devices are seamlessly deployed, securely configured, and consistently maintained. You’ll partner closely with Service Desk, Security, and Infrastructure teams to improve operational efficiency, strengthen endpoint security, and enhance the employee experience.

This is a primarily operational role with opportunities to drive automation, standardization, and continuous improvement as our environment continues to grow.

What You'll Do:

Endpoint Management & Provisioning

• Administer and support enterprise endpoint platforms including Microsoft Intune and Jamf Pro.
• Manage device enrollment, configuration profiles, compliance policies, and lifecycle management across Windows, macOS, iOS, and Android.
• Implement and support automated provisioning using Windows Autopilot and Apple Business Manager.
• Maintain standardized device configurations and operational documentation.

Application & Patch Management

• Package, test, and deploy applications across Windows and macOS environments.
• Execute operating system and third-party patching to maintain device health and security.
• Monitor deployments, troubleshoot issues, and ensure reliable delivery at scale.

Endpoint Security & Compliance

• Implement and maintain endpoint security controls including device encryption, hardening baselines, and compliance policies.
• Support device compliance and Conditional Access requirements through Entra ID.
• Partner with Security teams to identify and remediate endpoint vulnerabilities.

Support & Continuous Improvement

• Provide support for complex endpoint issues and perform root cause analysis.
• Identify opportunities to improve reliability, reduce manual effort, and enhance the end-user experience.
• Develop automation using PowerShell
• Collaborate with cross-functional teams to deliver a consistent and secure endpoint environment.

What We’re Looking For:

• 4–7 years of experience in endpoint engineering, device management, or end-user computing.
• Hands-on experience with Microsoft Intune and Jamf Pro in an enterprise environment.
• Experience managing Windows, macOS, and mobile platforms at scale.
• Strong background in application packaging, deployment, and patch management.
• Experience supporting endpoint security controls and vulnerability remediation.
• Intermediate scripting skills (PowerShell, Bash, or similar).
• Familiarity with endpoint protection, vulnerability management, and IT service management platforms.
• Strong troubleshooting, documentation, and cross-team communication skills.
• A proactive, ownership mindset with a focus on continuous improvement.

Preferred Qualifications:

• Microsoft or Jamf certifications
• Experience in a fast-paced or high-growth environment
• Familiarity with ITIL practices or structured change management

The salary range for this position is $130,000 to $140,000, which represents base pay only and does not include short-term or long-term incentive compensation. When determining base pay, as part of a final compensation package, we consider several factors such as location, experience, qualifications, and training. The listed salary range is specific to NYC only and may not be applicable to other locations.