Senior MDM Engineer

At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure solutions.

The ideal candidate thrives in an innovative, fast-paced environment and is collaborative, accountable, ready, and empathetic. We’re looking for individuals who believe they can accomplish more as a team and create lasting growth for themselves and others. We hire based on attitude, competency, and commitment. Solarians are ready to advance our world-class solutions in a fast-paced environment and accept the challenge to lead with purpose. If you’re looking to build your career with an exceptional team, you’ve come to the right place. Join SolarWinds and grow with us!

We work in a hybrid mode 3+2, with a minimum of 3 days at the office (with mandatory Tuesdays and Wednesdays) and a maximum of 2 days at the home office.

The location of our office is Holandská 873/6, Brno – Štýřice, 639 00.

We employ only via an employment contract – full-time employment (HPP).

The Role

We're looking for a Senior MDM Engineer to own and drive the strategy, automation, and day-to-day management of our endpoint fleet across Windows and macOS platforms. You will be a senior member of the team responsible for building and maintaining the "Zero Touch" device experience for every SolarWinds employee.

This isn't a break-fix role. You'll be engineering the platform that makes laptops just work — from unboxing to retirement. You'll partner closely with Director of User Experience, the Global Helpdesk, and IT leadership to keep our endpoints secure, compliant, and frictionless.

What You'll Do

Endpoint Management & Strategy

• Own and mature our Microsoft Intune environment — Autopilot profiles, compliance policies, configuration profiles, Autopatch rings, and Conditional Access integration via Entra ID.
• Own and mature our JAMF Pro environment — automated enrollment (DEP/ABM), Self Service policies, JAMF Connect, scripting, and smart/static group management.
• Architect and maintain the Intune + JAMF integration (JAMF as Management Authority, Intune as Compliance Authority) to enforce a single security posture across platforms.
• Design, test, and deploy Zero Touch provisioning workflows for both Windows (Autopilot) and macOS (DEP/ABM + JAMF) so new hires are productive from day one.

Security & Compliance

• Build and enforce device compliance policies aligned with security requirements — encryption, OS currency, antivirus status, Conditional Access gating.
• Partner with Our Security Teams to remediate endpoint vulnerabilities, deploy emergency patches, and manage security agent deployments (SentinelOne, Microsoft Defender).
• Manage Endpoint Privilege Management (Admin By Request) policies and Intune RBAC roles.
• Support audit and compliance requirements by maintaining clean device inventories and accurate reporting.

Lifecycle & Operations

• Manage full device lifecycle: enrollment → provisioning → patching → compliance monitoring → retirement/wipe.
• Maintain and improve application packaging and deployment pipelines for both platforms.
• Handle Tier 3 escalations from the Global Helpdesk related to MDM, device provisioning, and platform issues.
• Develop and maintain Knowledge Base articles and runbooks to enable Helpdesk shift-left on common MDM issues.

Automation & Continuous Improvement

• Write and maintain PowerShell and Bash/Shell scripts to automate device management tasks, reporting, and remediation.
• Build dashboards and reporting (e.g., compliance rates, enrollment success, OS version distribution, patch status) to track fleet health.
• Identify opportunities to reduce ticket volume through proactive policy, self-healing scripts, and improved self-service options.
• Contribute to sprint-based project work (MDM team runs Jira sprints) for platform improvements and security initiatives.

Qualifications

• 5+ years of hands-on experience managing endpoints at scale in a corporate environment.
• Deep expertise in Microsoft Intune — Autopilot, compliance policies, configuration profiles, Autopatch, Conditional Access, Entra ID integration.
• Deep expertise in JAMF Pro — DEP enrollment, Self Service, JAMF Connect, configuration profiles, smart groups, scripting (Bash/Shell).
• Strong understanding of Apple Business Manager (ABM) and the Apple device lifecycle.
• Solid experience with Windows 10/11 and macOS administration and troubleshooting.
• Proficiency scripting in PowerShell and Bash/Shell for automation and reporting.
• Understanding of Entra ID (Azure AD), Conditional Access, and modern identity-driven security models.
• Familiarity with endpoint security tooling — EDR, privilege management, encryption enforcement.
• Strong documentation habits — you write the KB article before someone asks.
• Relevant certifications: Microsoft Certified (Intune/Endpoint Manager), JAMF 200/300/370, Apple Certified.

Our benefits:

• 25 days of vacation per year
• 3 sick days per year
• 10 study days per year
• 2 volunteering days per year
• 4 weeks’ holidays after 5-year tenure, Sabbatical Leave
• Up to 48 300CZK personal education budget per year
• Pension or life insurance matching donation up to 3% of the salary or 4000 CZK per month
• Cash allowance for meals of 95 CZK per working day
• Unlimited access to LinkedIn Learning
• English/Czech classes
• Multisport card
• Solarian Referral Program
• SolarWinds Appreciation Program
• Giving – Donation Matching
• Employee Assistance
• Competitive Race Reimbursement
• Breakfast on Wednesdays
• Fresh fruits and snacks on Mondays
• On-site gym
• Twice-weekly workout classes at the office
• Once a week yoga sessions at the office

SolarWinds is an Equal Employment Opportunity Employer. SolarWinds will consider all qualified applicants for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, marital status, disability, veteran status or any other characteristic protected by law.

All applications are treated in accordance with the SolarWinds Privacy Notice: https://www.solarwinds.com/applicant-privacy-notice