The Opportunity
We are seeking a highly motivated and proactive Endpoint Performance Specialist to join our Digital IT team. In this fast-paced role, you will be responsible for designing, implementing, and optimizing endpoint management, automation, and performance engineering solutions that enhance the digital employee experience across a global organization. Working closely with Infrastructure, Security, and Operations teams, you will drive initiatives focused on endpoint reliability, compliance, security, and operational efficiency through modern device management and automation.
The Endpoint Performance Specialist provides technical expertise, strategic guidance, and operational support as a key member of the Digital IT team. In partnership with internal stakeholders, you will develop scalable automation solutions, optimize Windows endpoint performance, manage Intune and security policies, and leverage digital experience insights to deliver a seamless and productive user experience. The ideal candidate will possess strong problem-solving and analytical skills, excellent communication and collaboration abilities, and a passion for automation, continuous improvement, and delivering exceptional technology experiences.
Essential Duties and Responsibilities
Endpoint Management and Automation
- Design, develop, and maintain enterprise-scale automation solutions for endpoint provisioning, configuration, remediation, security enforcement, and lifecycle management
- Develop advanced PowerShell and Python automation frameworks to reduce manual operational effort and improve service reliability
- Build proactive remediation and self-healing solutions using Microsoft Intune, Endpoint Analytics, DEX platforms, and Windows native capabilities
- Automate endpoint health checks, compliance validation, software deployment, performance optimization, and security policy enforcement
- Integrate automation with Microsoft Graph API, Azure Automation, Power Automate, and other enterprise management platforms
- Establish automation standards, governance, code reviews, testing methodologies, and documentation best practices
- Identify opportunities to eliminate repetitive operational tasks and drive continuous improvement through automation
Performance Engineering & Troubleshooting
- Perform advanced diagnostics for boot/login delays, application slowness, memory/CPU bottlenecks, and storage I/O issues
- Utilize tools such as Windows Performance Analyzer (WPA), Windows Performance Recorder (WPR), Sysinternals Suite, PerfMon, ProcMon, and ETW tracing
- Define and maintain endpoint performance baselines and implement proactive monitoring strategies
- Conduct root cause analysis of recurring endpoint performance issues and recommend long-term solutions
Endpoint Imaging & Deployment Automation
- Design, maintain, and optimize Windows 11 golden images for large-scale enterprise deployment
- Automate OS and application deployments using Intune (Autopilot) and Azure AD
- Develop and maintain PowerShell scripts for image updates, driver integration, and application packaging
- Implement zero-touch provisioning and streamline device onboarding processes
Intune & Security Policy Management
- Configure and manage Intune endpoint policies, compliance rules, and Autopilot deployments
- Implement and maintain Windows Defender Application Control (WDAC) policies to enforce application security and compliance without compromising performance
- Align endpoint configurations with enterprise security baselines (BitLocker, Microsoft Defender, CIS, and MDM policies)
- Collaborate with Security teams to ensure balance between performance, optimization, automation, and compliance
Digital Employee Experience (DEX) Monitoring
- Use DEX tools (e.g., Aternity, Nexthink, or equivalent) to monitor user experience, identify performance gaps, and improve endpoint reliability
- Analyze telemetry and feedback to drive continuous improvement in end-user productivity and satisfaction
- Integrate DEX insights with automation to create proactive remediation and self-healing solutions
Minimum Qualifications
- 4–6 years of experience in Windows endpoint engineering, automation, imaging, and performance optimization
- Strong expertise in Windows 11 internals (boot process, registry, kernel processes, OS servicing)
- Hands-on experience with Microsoft Intune (Autopilot, Endpoint Security, Compliance, Analytics)
- Proven experience implementing and managing Windows Defender Application Control (WDAC)
- Strong automation engineering experience with PowerShell scripting, Microsoft Graph API, Intune automation, proactive remediations, and endpoint self-healing solutions
- Ability to design scalable automation frameworks and eliminate manual operational processes
- Proficiency in automation and scripting (PowerShell required; Python preferred)
- Skilled in using performance diagnostics tools (WPA, WPR, Sysinternals, ProcMon, ETW, PerfMon)
- Working knowledge of Active Directory, Group Policy, Azure AD, and hybrid identity models
- Familiarity with DEX tools for endpoint experience monitoring
Preferred Qualifications
- Experience with Azure Automation, Power Automate, Logic Apps, Graph API, and automation orchestration platforms
- Experience with application packaging and distribution
- Exposure to endpoint CI/CD pipelines (Azure DevOps, GitHub Actions)
- Understanding of network performance tuning for endpoints
- Knowledge of VDI/AVD environments and Windows 11 performance in virtualized contexts
About Egon Zehnder
Egon Zehnder is the world’s preeminent leadership advisory firm, inspiring leaders to navigate complex questions with human answers. We help organizations get to the heart of their leadership challenges and offer honest feedback and insights to help leaders realize their true being and purpose.
We are built on a foundation that supports partnership in the truest sense of the word and aligns our interests with the interests of our clients. Our 560 consultants across 64 offices and 36 countries are former industry and functional leaders who collaborate seamlessly across geographies, industries and functions to deliver the full power of the Firm to every client, every time.
We partner closely with public and private corporations, family-owned enterprises, and non-profit and government agencies to provide executive search, leadership solutions, CEO search and succession, and board advisory.
We believe that together we can transform people, organizations and the world through leadership.
Due to high volume, we will only be contacting applicants who meet all of the minimum requirements listed in the job description. Only those applicants who align most closely with our minimum and preferred qualifications will be contacted for an interview. The Recruiting team at Egon Zehnder will retain your application materials and may contact you regarding future opportunities.
