Lead Infrastructure Engineer - Endpoint

Job Description

Job Title: Lead Infrastructure Engineer - Endpoint

Posting Start Date: 4/3/26

Job Description:

Salary Range: $101,490 - $120,000

The base salary range represents a good faith salary range for this position. This position is eligible for annual incentive pay and has the opportunity for continued salary growth. If you are hired at American Water your base salary compensation will be determined based on factors such as market, geography, skills, education and/or experience. At American Water, we are committed to pay equity. In addition to compensation, you will be offered a comprehensive benefits package including 401(k), Defined Contribution Plan, Employee Stock Purchase Plan, medical, prescription, dental and vision coverage, plus disability, paid time off, life insurance, voluntary benefits, health and wellness programs and much more!

American Water is also proud to offer employees learning opportunities and work experiences to grow professionally!

Serve as the technical lead for the Endpoint team, owning the strategy, architecture, and day-to-day delivery of enterprise Endpoint and/or VDI services. This role defines and enforces endpoint standards across Windows, macOS, iOS, and Android, ensuring devices are secure, compliant, reliable, and consistently configured throughout their lifecycle (provisioning, enrollment, patching, upgrades, break/fix, and retirement). The Lead Infrastructure Engineer partners closely with Service Desk, Field Support, Cyber Security, and key vendors to coordinate service delivery, drive continuous improvement, and provide senior-level escalation for complex incidents and systemic issues. Core responsibilities include administration and optimization of the enterprise endpoint management ecosystem (device management, identity/access integrations, and endpoint analytics/automation services), including building and maintaining device profiles, compliance policies, security baselines, certificates, and conditional access controls; packaging and deploying applications and updates; and using telemetry and analytics to improve performance and end-user experience. For VDI, the role leads the engineering and operational support model, including image and application delivery, access workflows, performance and capacity considerations, and alignment with identity, networking, and security requirements. The position also produces and maintains technical documentation, operational runbooks, and standards, and mentors team members on tooling, troubleshooting, and best practices.

- Develop, document, and enforce endpoint and VDI policies, procedures, and technical standards to ensure secure, compliant, and consistent configurations across Windows, macOS, iOS, and Android. Maintain operational runbooks and SOPs (including provisioning, enrollment, patching, software deployment, access controls, and incident response), align standards with Security and audit requirements, and drive adherence through reviews, continuous improvement, and change control.

- Act as an expert in a particular field of knowledge [this may be a business/functional area and/or a particular technology] and provide detailed information and advice as necessary in that specialization to achieve business outcomes. Develop and/or promote technical solutions which support the business requirements within their area of expertise. Be accountable for specific deliverables in relation to software or web development and/or support. As needed, lead the technical activity within their area of specialization.

Knowledge/Skills

- Working knowledge of Windows, MacOS, iOS and Android environments.

- Understanding of how to mass deploy software or windows images

- Understanding of configurations or installations from SCCM or Workspace ONe

- Perform 3rd level support, identifying root cause with strategic solutions to problems

Experience/Education

- Bachelors' degree in Computer Science, Information Systems, relevant field of Engineering or similar technology field [equivalent work experience will be considered]

- 6 to 9 years experience working in the technology field required. Experience with the water utility industry is highly desired, but not required.

- Experience in Endpoint & System Administration for a highly virtualized, complex enterprise.

- Experience in Endpoint & System Engineering for a highly virtualized, complex enterprise.

- Experience packaging software

- Familiarization with SCCM or VMware Workspace ONE

- Background in MDM management

- PowerShell, Active Directory and Group Policy/CSP management

Certifications & Licenses

Microsoft MCP/MCSA/MCSE or other related certifications desired

As necessary, up to 50%