Senior DWX Microsoft Engineer

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001’s culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets – our employees.

Why This Role Matters:

We're looking for a Senior Microsoft Engineer who lives at the intersection of deep technical mastery and genuine user obsession. You'll own our endpoint platform and the broader M365 ecosystem — the technology our people touch every single day — and you'll be the engineer who makes sure that experience is fast, secure, modern, and effortless. This isn't a keep-the-lights-on role. We need a true technologist: someone who reads release notes for fun, follows the threat landscape, experiments with AI on weekends, and believes automation isn't a project — it's a posture.

The endpoint is where our business meets technology. Every advisor conversation, every policy issued, every claim adjudicated — it all flows through the devices and platforms you'll own. We're investing in this role because we believe a world-class digital workplace is a competitive advantage, not a cost center. We need an engineer who believes the same thing and has the chops to prove it.

related knowledge, skills, and experience.

How You'll Contribute:

You will be the platform owner for endpoint at our firm — the engineer accountable for how every device is provisioned, secured, managed, and retired. Intune, Autopilot, Defender for Endpoint, Entra ID, Configuration Manager where it still matters, and the full M365 suite (Teams, Exchange Online, SharePoint, OneDrive, Purview) all fall within your scope. You'll set the standard for how we deploy, patch, harden, and evolve these platforms.

You'll engineer with modern discipline. CI/CD pipelines for configuration and policy deployment, Git-based source control for everything that can be expressed as code, PowerShell and Graph API automation woven through the stack, and infrastructure-as-code practices applied to the digital workplace. You'll treat endpoint engineering the way platform teams treat production systems — with versioning, testing, peer review, and observability.

You'll embed AI and automation into the fabric of how DWX operates. Whether that's Copilot rollout and governance, AI-assisted troubleshooting, intelligent device health analytics, or automation that retires manual toil before it becomes someone's job — you'll be the engineer pulling these capabilities forward, responsibly and with measurable impact.

You'll own endpoint security in partnership with Cybersecurity. Hardening baselines, conditional access, attack surface reduction, zero trust posture, vulnerability remediation, and the operational rigor to keep our fleet defensible against a threat landscape that doesn't sleep. You'll know which CVE matters this morning and what to do about it before it becomes Friday's incident.

Who You'll Work With:

You'll partner deeply across the technology organization: Networks on connectivity, identity, and zero trust; Cybersecurity on threat response, baselines, and compliance; Architecture on platform strategy and long-horizon decisions; Product Management on roadmap and prioritization; and stakeholders and end users on the experience itself — because the user is the epicenter of every decision you make. The best engineers in this seat are equally credible explaining a Conditional Access design to a security architect and walking a frustrated end user through a fix without making them feel small.

What We're Looking For:

You've spent 7+ years engineering Microsoft platforms in regulated environments — L&A, insurance, or financial services preferred. You have expert-level command of Intune, Autopilot, Entra ID, and the M365 administrative stack. Your PowerShell is fluent, your Graph API usage is comfortable, and you've built real CI/CD pipelines for endpoint and M365 workloads using Azure DevOps, GitHub Actions, or equivalent. Git is muscle memory.

You have a working command of endpoint security: Defender for Endpoint, attack surface reduction, BitLocker, Credential Guard, application control, and the principles behind zero trust. You understand identity as the new perimeter and can engineer accordingly.

You stay current. You follow industry voices, read the Microsoft tech community, tr