I O Engineering Consultant

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

As an I O Engineering Consultant, you will deliver reliable and secure device management services in a Dual UEM environment using Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, and Omnissa Workspace ONE UEM. You will own day-to-day endpoint engineering and operational outcomes across application lifecycle (packaging to deployment), OS servicing, patch compliance, vulnerability remediation, and endpoint configuration. The role is execution-focused with strong troubleshooting depth and disciplined ITSM practices. You will routinely participate in major incident bridges/war rooms, ensuring service restoration within agreed SLAs and contributing to measurable MTTR reduction. You will also contribute to AI adoption by proposing and piloting practical ideations (e.g., ticket triage assist, automated log parsing, runbook generation) to improve reliability, speed, and user experience, while adhering to organizational security, privacy, and data handling standards.

Primary Responsibilities

• Platform Operations, Health & Availability
• Administer MECM components (collections, boundaries, deployments, content distribution, client health monitoring, reporting)
• Administer Intune (enrollment, configuration profiles, compliance policies, app assignments, RBAC) and support coexistence with MECM
• Administer Workspace ONE UEM (profiles, Smart Groups, compliance, app deployments) and support coexistence with Intune (Dual UEM)
• Monitor platform health and availability: enrollment success, policy/app success rates, client health, content distribution health, and remediation backlogs
• Maintain device inventory accuracy and operational hygiene; perform routine health checks and standard validations
• Application Lifecycle, OS Servicing & Operations
• Package and deploy applications (MSI/EXE/MSIX/Win32) with detection methods, dependencies, supersedence, and phased ring deployments
• Support OS deployment and servicing (Task Sequences, feature updates, in-place upgrades), driver/BIOS packaging coordination, and rollback plans
• Execute post-deployment validation and remediation for failed installs, policy conflicts, and provisioning issues
• Patching, Vulnerability Remediation & Compliance
• Operate software update/patching via MECM (ADRs, maintenance windows, deployment schedules, compliance reporting) and coordinate exception handling
• Support vulnerability remediation initiatives by deploying security patches and approved mitigations within defined timelines
• Track compliance posture and drive remediation for non-compliant endpoints; support dashboards and reporting
• Troubleshooting, ITSM & War Rooms
• Troubleshoot endpoint deployment and client issues using logs and diagnostics (e.g., AppEnforce/AppDiscovery, WUAHandler, CAS, CCMExec)
• Work within ITSM processes (Incident/Problem/Change) including change documentation, risk assessment, and post-change validation
• Participate in major incident war rooms/bridges; provide technical inputs, implement mitigations, and document restoration actions
• Track and drive SLA adherence; contribute to MTTR reduction via faster triage, known error documentation, and repeat-incident prevention
• Automation & AI Adoption / Ideation
• Create and maintain PowerShell-based operational automations (health checks, compliance reporting, remediation scripts)
• Propose AI-assisted improvements (e.g., Copilot-assisted draft runbooks, KB articles, ticket summarization, and log pattern identification)
• Pilot small-scale AI/automation ideations with measurable success criteria (time saved, reduced rework, improved compliance)
• Ensure AI usage adheres to organizational security, privacy, and data handling policies (no sensitive data leakage)
• Skills & Qualifications (Broken Down)
• Core Technical Skills (Primary)
• MECM/SCCM: application model, collections, deployments, boundaries, content distribution, client health, reporting
• Microsoft Intune: enrollment methods, configuration/compliance policies, Win32 app deployment, troubleshooting, RBAC
• Omnissa Workspace ONE UEM: minimum 1 year; administrative depth (profiles, Smart Groups, app distribution, compliance policies, device troubleshooting)
• Dual UEM operations: support coexistence, minimize policy conflicts, and ensure consistent end-user experience
• Operations, Health & Availability
• Health monitoring and remediation: client health, enrollment success, policy/app deployment success, content distribution health
• Service reliability ownership: stability, availability, and operational hygiene
• Patching & Vulnerability Operations
• MECM patching operations: ADRs, deployment rings, maintenance windows, compliance reporting
• Vulnerability remediation support: execute remediation plans and validate compliance within required timelines
• Automation & Scripting
• PowerShell scripting for automation and remediation; familiarity with scheduled tasks and basic safe rollout practices
• Ability to create repeatable runbooks and operational checklists
• ITSM & Operational Excellence
• Working knowledge of Incident/Problem/Change management; ability to write clear change plans and validation steps
• Experience working in war rooms and providing concise technical updates for rapid restoration
• Ownership mindset for SLA adherence and MTTR reduction
• AI Adoption & Continuous Improvement
• Comfort using approved AI tools to accelerate documentation, analysis, and knowledge management
• Ability to identify repetitive tasks suitable for automation or AI assistance and propose improvements
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
  

• 6+ years in enterprise endpoint management
• 1+ years of hands-on administrative experience with Omnissa Workspace ONE UEM
  
  

• Bachelors degree in Engineering/Computer Science or equivalent experience
• Preferred: ITIL Foundation, Microsoft endpoint-related certifications, Workspace ONE training/certification
  
  

• Endpoint platform health and availability maintained with sustained reduction in unhealthy clients/devices
• Patch compliance and vulnerability remediation achieved within agreed windows; improved deployment success rates
• Reduced repeat incidents through better RCA documentation, known error articles, and proactive remediation
• Improved MTTR via faster triage, clearer runbooks, and automation/AI-assisted workflows