Ivanti Endpoint Manager (EPM) Engineer

LincolnIT is seeking an experienced Ivanti Endpoint Manager (EPM) Engineer to support enterprise endpoint management, patch management, software deployment, vulnerability remediation, and endpoint automation initiatives across multiple client environments.

The ideal candidate will serve as the subject matter expert (SME) for the administration, optimization, and support of Ivanti Endpoint Manager in large and complex enterprise environments. This role requires deep expertise in endpoint lifecycle management, software packaging, Windows administration, security compliance, and PowerShell automation.
Candidates should have experience supporting environments with 5,000+ managed endpoints and be comfortable working in highly regulated industries such as healthcare, financial services, education, and government.

Key Responsibilities

Ivanti Endpoint Manager Administration

• Administer, maintain, and optimize Ivanti Endpoint Manager (EPM) infrastructure
• Configure and support core servers, relay servers, distribution points, and endpoint agents
• Monitor platform health, performance, scalability, and reliability
• Perform upgrades, patching, maintenance, troubleshooting, and system optimization
• Develop and maintain platform standards, procedures, and documentation

• Deploy Microsoft operating system security updates and cumulative patches
• Manage third-party application patching and update compliance
• Create and execute vulnerability remediation campaigns
• Work with security teams to address critical vulnerabilities and risk exposures
• Generate patch compliance reports, executive dashboards, and remediation metrics
• Support audit, compliance, and regulatory requirements

• Create, test, and maintain:
  • MSI packages
  • EXE deployments
  • PowerShell-based deployments
  • Custom software distribution packages
• Troubleshoot complex deployment and installation failures
• Maintain software repositories and package version control
• Define and enforce application deployment standards
• Support application testing, validation, and release management

• Develop PowerShell scripts to automate endpoint administration and operational tasks
• Automate patching, software deployment, and remediation workflows
• Create endpoint health monitoring and reporting automation
• Support operating system deployment and endpoint provisioning initiatives
• Identify opportunities to improve efficiency through automation and standardization

• Serve as a technical escalation resource for endpoint management initiatives
• Participate in endpoint modernization, migration, and remediation projects
• Assist with design and implementation of endpoint management solutions
• Provide technical guidance and best practices to internal teams and clients

• 5+ years of experience administering Ivanti Endpoint Manager (formerly LANDesk)
• Experience supporting enterprise environments with 5,000+ managed endpoints
• Strong Windows Server and Windows Desktop administration experience
• Advanced knowledge of endpoint management, software deployment, and patch management
• Strong PowerShell scripting and automation experience
• Experience with application packaging and deployment methodologies
• Knowledge of vulnerability management and remediation practices
• Experience supporting security, compliance, and audit requirements
• Excellent troubleshooting, documentation, and communication skills

• Ivanti certifications
• Experience with Microsoft Intune
• Experience with Microsoft Endpoint Configuration Manager (MECM/SCCM)
• Experience with Microsoft Defender for Endpoint
• Experience with Azure AD / Entra ID
• Experience with Workspace ONE
• Experience working within healthcare, financial services, education, or government environments
• Knowledge of CIS Benchmarks, NIST, and other security frameworks
• Experience developing Power BI dashboards and reporting

• Ivanti Endpoint Manager (EPM)
• LANDesk
• Endpoint Lifecycle Management
• Desktop Engineering
• Operating System Deployment (OSD)

• Patch Management
• Vulnerability Remediation
• Microsoft Security Updates
• Third-Party Application Patching
• Compliance Reporting
• Endpoint Security

• PowerShell
• Advanced PowerShell Scripting
• Process Automation
• Task Automation
• Software Deployment Automation
• Endpoint Remediation Automation

• MSI Packaging
• EXE Deployments
• Application Packaging
• Silent Installations
• Software Distribution
• Package Testing & Validation

• Windows Server
• Windows 10/11
• Active Directory
• Group Policy
• Microsoft Intune
• MECM / SCCM
• Microsoft Defender for Endpoint
• Entra ID