ABOUT TEKION: Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe. JOB INTRODUCTION: The Systems Engineer is a technical leader responsible for designing, implementing, and supporting Tekion's enterprise IT systems with a strong emphasis on endpoint management and device compliance. This role drives system scalability, security, and reliability through complex project ownership, cross-functional partnership, and continuous platform improvement across macOS and Windows environments. KEY ROLES & RESPONSIBILITIES - Lead implementation, maintenance, and optimization of enterprise platforms including Entra ID (Azure AD), Microsoft 365, SSO/IAM solutions, and MDM/endpoint management tooling (Jamf, Intune, or equivalent). - Own the design, configuration, and enforcement of device management policies across macOS and Windows fleets — including enrollment workflows, compliance baselines, configuration profiles, and patch management. - Design and automate workflows for system provisioning, access lifecycle management, and endpoint configuration standardization across the environment. - Own root cause analysis on high-complexity system and endpoint issues, driving durable resolutions that improve long-term platform stability. - Collaborate with cybersecurity, infrastructure, and application teams to deliver secure, well-integrated system and endpoint architecture. - Lead platform upgrades, integrations, and migrations — including MDM consolidations or transitions — with a focus on business continuity and minimal operational disruption. - Maintain architectural documentation, system configurations, device management policies, and change procedures to support knowledge transfer and audit readiness. - Mentor junior engineers and contribute to team capability through training, process improvement, and best practices adoption. Job Complexity Leads technically complex systems engineering projects across multiple platforms, critical systems, and large-scale endpoint environments. Serves as a subject matter expert and trusted advisor on systems reliability, device compliance, security, and scalability. Required Supervision Operates independently. Drives technical initiatives and provides cross-team guidance with minimal direction. BASIC QUALIFICATIONS - 5–7 years of experience in IT systems engineering or enterprise platform administration - Bachelor's or Master's degree in Information Technology, Computer Science, or related field - Hands-on expertise with MDM platforms for macOS and Windows — Jamf and/or Microsoft Intune strongly preferred; equivalent experience with Workspace ONE, Kandji, or similar platforms considered - Expert-level proficiency in Microsoft 365, Entra ID, SSO/IAM platforms, and SaaS administration - Deep familiarity with macOS and Windows device management — enrollment, compliance policies, configuration profiles, app deployment, and patch workflows - Strong scripting and automation skills across PowerShell, Python, and/or Bash — including MDM-adjacent automation (e.g., Jamf API, Graph API) - Demonstrated experience with security hardening, compliance readiness, and endpoint monitoring - Strong documentation, collaboration, and cross-functional communication skills - Mentorship experience and a track record of elevating team capabilities - Relevant certifications preferred: Jamf Certified Admin (JCPA), Microsoft Certified: Endpoint Administrator, Microsoft Certified: Enterprise Administrator Expert, CISSP Current Tekion Employees: Please apply via the Internal Job Board in Ashby. Note: Tekion recently transitioned to a new recruiting tool and we appreciate your patience and feedback as we adjust to our new system! Tekion is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, victim of violence or having a family member who is a victim of violence, the intersectionality of two or more protected categories, or other applicable legally protected characteristics. For more information on our privacy practices, please refer to our Applicant Privacy Notice here https://tekion.com/legal/privacy/applicant-and-candidate-privacy-notice. Important: Tekion will only contact candidates from an @tekion.com http://tekion.com email address or through our applicant tracking system (no-reply@ashbyhq.com). We may also work with authorized recruiting partners from time to time. Tekion and its recruiting partners will never ask you to pay fees or send money for applications, interviews, training, or onboarding. If you receive a message that seems suspicious, please do not respond or share personal or financial information.