T. Rowe Price

1 week ago

Desktop Engineering Lead - Endpoint Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 21 hours agoStatus: Live

Job Summary

Own the technical direction and operational health of the endpoint environment for approximately 14,000 managed devices. Lead endpoint engineering and security by defining architecture, configuration baselines, OS lifecycle standards, and endpoint compliance. Drive vulnerability remediation, patching, and secure execution using Intune, MECM/SCCM, Microsoft Defender, Entra ID, and WDAC. Partner with Security, Infrastructure, Risk, and Audit teams to maintain audit readiness, reduce exposure, and improve reliability through automation and standardization.

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Serve as technical lead for endpoint engineering, operations, and security across ~14k devices, ensuring standardized design, implementation, and enforcement.
•Own the endpoint management stack, including Intune, MECM (SCCM), Microsoft Defender, Entra ID, and related tooling.
•Define and maintain endpoint architecture, configuration baselines, and OS lifecycle standards aligned to security and regulatory requirements.
•Own endpoint health and compliance, including patching, OS upgrades, device posture, and conditional access enforcement; enforce WDAC policies.
•Partner with Security and Vulnerability Management teams to prioritize and execute endpoint remediation, driving root cause analysis and corrective actions while maintaining audit readiness.

Pay and Benefits

Perks:Annual BonusRetirementHybrid WorkHealth InsurancePaid Leave

Key Requirements

•BS or MS degree (or equivalent experience) and 8+ years in endpoint engineering, EUC, or desktop platform management in a large enterprise environment.
•Deep hands-on expertise with Intune, MECM (SCCM), Microsoft Defender, Entra ID, and Windows endpoint security controls.
•Strong experience operating in regulated environments (financial services, healthcare, or similarly highly regulated enterprises).
•Proven ownership of endpoint patching, vulnerability remediation, OS lifecycle, and compliance controls at scale.
•Demonstrated ability to serve as the technical decision authority for high-risk or high-impact endpoint changes.

Experience:8+ yearsFinancial servicesHealthcareRegulated environments

Skills:Technical leadershipMentorshipTroubleshootingRoot cause analysisRisk communication

Tech Stack:IntuneMECMSCCMMicrosoft DefenderMicrosoft Defender Application Control (WDAC)Entra IDWindows

Company Brief

T. Rowe Price

Global investment management firm offering mutual funds, retirement services, and advisory solutions for individual and institutional investors. Manages assets across equities, fixed income, multi-asset, and alternative strategies.

Industry: Asset Management

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Baltimore, United States

Founded: 1937

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

T. Rowe Price

1 week ago

Desktop Engineering Lead - Endpoint Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 21 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Serve as technical lead for endpoint engineering, operations, and security across ~14k devices, ensuring standardized design, implementation, and enforcement.
•Own the endpoint management stack, including Intune, MECM (SCCM), Microsoft Defender, Entra ID, and related tooling.
•Define and maintain endpoint architecture, configuration baselines, and OS lifecycle standards aligned to security and regulatory requirements.
•Own endpoint health and compliance, including patching, OS upgrades, device posture, and conditional access enforcement; enforce WDAC policies.
•Partner with Security and Vulnerability Management teams to prioritize and execute endpoint remediation, driving root cause analysis and corrective actions while maintaining audit readiness.

Pay and Benefits

Perks:Annual BonusRetirementHybrid WorkHealth InsurancePaid Leave

Key Requirements

•BS or MS degree (or equivalent experience) and 8+ years in endpoint engineering, EUC, or desktop platform management in a large enterprise environment.
•Deep hands-on expertise with Intune, MECM (SCCM), Microsoft Defender, Entra ID, and Windows endpoint security controls.
•Strong experience operating in regulated environments (financial services, healthcare, or similarly highly regulated enterprises).
•Proven ownership of endpoint patching, vulnerability remediation, OS lifecycle, and compliance controls at scale.
•Demonstrated ability to serve as the technical decision authority for high-risk or high-impact endpoint changes.

Experience:8+ yearsFinancial servicesHealthcareRegulated environments

Skills:Technical leadershipMentorshipTroubleshootingRoot cause analysisRisk communication

Tech Stack:IntuneMECMSCCMMicrosoft DefenderMicrosoft Defender Application Control (WDAC)Entra IDWindows

Company Brief

T. Rowe Price

Industry: Asset Management

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Baltimore, United States

Founded: 1937

Website LinkedIn