Carver Companies is continuing its digital modernization efforts, including cloud adoption, device standardization, and enhanced cybersecurity readiness aligned with CMMC (Cybersecurity Maturity Model Certification). The Endpoint Engineer will be responsible for managing, securing, and optimizing all company endpoints, ensuring reliable device performance and a consistent user experience across the organization. This role is ideal for a detail‑oriented engineer with strong experience in endpoint management platforms, device lifecycle administration, and modern workplace technologies such as Microsoft Intune and Microsoft 365.

Endpoint Management & Device Administration Design, configure, and maintain standardized Windows endpoint images and deployment processes. Manage and support enterprise endpoints using N-able, Group Policy, and related endpoint management tools to ensure system reliability, security, and compliance. Provision, configure, deploy, and support iOS mobile devices for enterprise users using Mobile Device Management (MDM) platforms such as Apple Business Manager, Ivanti and Intune. Manage corporate mobile phone lines, service plans, and carrier accounts for company-issued devices, ensuring accurate provisioning, cost optimization, and uninterrupted service availability. Maintain asset inventories, coordinate device ordering and procurement, and ensure accurate tracking of company-issued hardware and mobile devices throughout their lifecycle. Identify opportunities to improve endpoint reliability, performance, and user experience. Oversee device lifecycle management including provisioning, patching, upgrades, and decommissioning. Develop and Maintain endpoint documentation, SOPs, and configuration records. Provision, configure, deploy, and support VoIP phone systems and network printers across the organization to ensure reliable communication and printing services. Security & Compliance Implement and monitor endpoint security controls including AV/EDR, encryption, and access policies. Validate device compliance with CMMC, NIST 800‑171, and internal security standards. Support vulnerability remediation efforts through patching, configuration updates, and reporting. Assist with evidence collection and documentation for audits and assessments. Triage security events and alerts by analyzing logs, endpoint activity, and monitoring tools to identify potential threats, validate incidents, and determine impact severity. Escalate confirmed or high-risk security incidents to appropriate cybersecurity, infrastructure, or management teams in accordance with established incident response procedures. Document findings, remediation actions, and escalation details to support incident tracking, reporting, and continuous improvement efforts. Cloud & Modern Workplace Support Support rollout and adoption of Microsoft 365, Azure AD, and cloud‑based endpoint services. Configure conditional access, identity‑based policies, and device compliance rules. Assist with automation using Python, PowerShell or similar scripting tools. Participate in modernization initiatives including cloud‑based device management and Zero Trust alignment. Operational Support & Collaboration Collaborate with Systems, and Network leads to resolve complex problems. Assist in network solutions for diverse environments including quarries, ports and marine vessels. Assist in IT Backup Disaster Recovery planning, testing and documentation. Use Python and PowerShell for automating tasks, managing systems, and enhancing workflows Additional duties as assigned by the Director of Information Technology.