Endpoint Engineering Manager (IS Service Manager)

We are the Metropolitan Council, the regional government for the seven-county Twin Cities metropolitan area. We plan 30 years ahead for the future of the metropolitan area and provide regional transportation, wastewater, and housing services. More

information about us on our website.

We are committed to supporting a

diverse workforce that reflects the communities we serve.

Information Services is the central IT department supporting all divisions of the Metropolitan Council. Our 140+ team members provide technology, practices, and innovative solutions that enable the core services of the Council.

Leadership and Resource Planning

• Lead the hiring, onboarding, and professional development of Endpoint Engineers.
• Conduct regular performance reviews, set objectives, and provide coaching and feedback.
• Develop and manage annual budgets for endpoint engineering, including hardware/software procurement and licensing.
• Forecast staffing needs and allocate resources to meet project and operational demands.
• Partner with procurement and finance teams for vendor negotiations and contract management.
• Drive succession planning and implement training programs to address skill gaps.
• Ensure operational teams meet performance targets through effective leadership and resource planning.

• Manage ticket queues for Incidents, Service Requests, Changes, and Problems, ensure Service Level Agreement (SLA) adherence, root-cause analysis, and continual service improvement.
• Provide status updates and reporting on Endpoint Engineering projects, highlighting milestones, risks, dependencies, spend, and outcomes.
• Estimate Endpoint Engineering project resource demand and support capacity planning and prioritization.
• Collaborate with other IS teams and business units to deliver projects and operational work (security, networking, identity, service desk, applications, and procurement).

• Oversee maintenance and lifecycle management of endpoint devices, including security vulnerability remediation, OS version management, compliance, and configuration standards.
• Implement and enforce modern device management best practices aligned to Zero Trust principles and Council security policies.
• Track and maintain endpoint device assets (hardware and software) as part of the asset management program, ensuring accurate inventories and lifecycle planning.
• Develop endpoint hardware and software recommendations based on organizational needs, performance, supportability, accessibility, and total cost of ownership.
• Help develop and contribute to the Council's strategic roadmap for endpoint device implementation, modernization, and ongoing maintenance.

Any of the following combinations of completed education (in information technology or a related field) and experience in endpoint administration/engineering and leadership:

• High school diploma/GED with 10 years of experience, including 3 years of experience in a managerial, supervisory, or lead worker role.
• Associate's degree with 8 years of experience, including 3 years of experience in a manager, supervisor, or lead worker role.
• Bachelor's degree with 6 years of experience including 3 years of experience in a manager, supervisor, or lead worker role.
• Master's degree with 4 years of experience including 3 years of experience in a manager, supervisor, or lead worker role.

• Experience implementing and supporting Microsoft Intune/Endpoint Manager, AutoPilot, Patch My PC, and/or Jamf Pro.
• Demonstrated success migrating between MDM platforms (e.g. AirWatch to Intune), including planning, pilot, rollout, and post-migration support.
• Experience in security vulnerability remediation, OS lifecycle management, and compliance baselines.
• Experience with ITSM processes (Incidents, Service Requests, Changes, Problems) and managing queues to SLAs.
• Asset management experience (inventory accuracy, lifecycle planning, device refresh, and disposal).
• 5+ years of hands-on experience in endpoint administration/engineering across Windows, macOS, iOS/iPadOS, and/or Android Enterprise.
• Microsoft MD-102, MS-102, AZ-104 certifications or other relevant certifications.
• Jamf 200/300 certifications or other relevant certifications.
• CompTIA Security+, ITIL 4 Foundation, PMP.
• Experience with Ivanti Neurons or similar ITSM/CMDB platforms.
• Experience designing endpoint standards catalogs and/or provisioning packages.
• Experience with Patch My PC deployment design and ring management for updates.
• Experience working with individuals at different organizational levels and from different personal and professional backgrounds, both technical and non-technical.
• Public sector or multi-agency environment experience.

• Ability to meet project milestones in a timely manner while adhering to budget and stakeholder requirements.
• Skills in hiring, onboarding, and retaining Endpoint Engineers.
• Ability to manage vulnerability remediation SLAs (time-to-remediate, critical patch coverage).
• Ability to monitor and manage ticket performance (volume, SLA attainment, re-open rates, CSAT).
• Ability to manage and improve endpoint compliance rates (percent of devices meeting policy baselines).
• Knowledge of and skills in managing asset accuracy (percent reconciliation to CMDB/inventory).
• Ability to manage OS currency (percent of devices on current supported versions).

What you can expect from us:

• We offer the opportunity to make a difference and positively influence the Twin Cities metropolitan area.
• We encourage our employees to develop their skills through on-site training and tuition reimbursement.
• We provide a competitive salary, excellent benefits and a good work/life balance.

More about

why you should join us!

Union/Grade: MANA / Pay Grade J
FLSA Status: Exempt
Safety Sensitive: No

Work Environment:
Work is performed in a standard office setting. May require travel between primary work site to other sites for deployments, stakeholder engagement, etc.

What steps the

recruitment process involves:

1. We review your minimum qualifications.
2. We rate your education and experience.
3. We conduct a structured panel interview.
4. We conduct a selection interview.

Once you have successfully completed the steps

above, then:

If you are new to

the Metropolitan Council, you must pass a drug test (safety-sensitive positions only), and a background check which verifies education, employment, and criminal history. A driving record check and/or physical may be conducted if applicable to the job. If you have a criminal conviction, you do not automatically fail. The Metropolitan Council considers felony, gross misdemeanor, and misdemeanor convictions on a case-by-case basis, based on whether they are related to the job and whether the candidate has demonstrated adequate rehabilitation.

If you are already

an employee of the Metropolitan Council, you must pass a drug test (if

moving from a non-safety sensitive position to a safety-sensitive position) and

criminal background checks if the job you're applying for is safety-sensitive,

is a supervisory or management job, is in the Finance, Information Services,

Audit, or Human Resources departments, or has access to financial records,

files/databases, cash, vouchers or transit fare cards. A driving record check and/or physical may be

conducted if applicable to the position.

Security Policy:

This position

involves direct access to Criminal Justice Information (CJI) as defined by the

FBI CJIS (Criminal Justice Information Services) security policy. In accordance

with section 5.12.1.1 of the FBI CJIS Security Policy, final candidates must

agree to submit to a state of residence and national fingerprint-based record

check.

If the result of the

record check reveals criminal convictions, the nature and circumstances of

those convictions will be reviewed by the Metropolitan Transit Police

Department and/or the Minnesota Bureau of Criminal Apprehension to determine if

access to Criminal Justice Information would be permissible. If it is

determined that access to Criminal Justice Information would not be

permissible, the candidate will no longer be considered for the position.

withhold information, you may be barred from job consideration.

The Metropolitan

Council is an Equal Opportunity, Affirmative Action, and veteran-friendly

employer. The Council is committed to a workforce that reflects the diversity

of the region and strongly encourages persons of color, members of the LGBTQ

community, individuals with disabilities, women, and veterans to apply.

If you have a disability that requires accommodation during the selection process, please email HR-OCCHealth@metc.state.mn.us