Lead engineer, end user computing (euc)

Description/Responsibilities

The Lead Engineer, End User Computing (EUC) designs, improves, and operates the employee computing platform and sets the engineering bar for how EUC changes are designed, tested, delivered, and sustained. This role is accountable for driving a test-first culture (automated validation before change), defining repeatable standards and reference configurations, and leading proactive platform modernization across identity, endpoints, and collaboration tooling. The Lead Engineer partners closely with IT Operations, Security, Networking, and business stakeholders to reduce operational risk, improve reliability and user experience, and enable faster, safer change through clear processes, automation, and measurable outcomes.

Key Responsibilities:

• End-User experience & Productivity Own and continuously improve the end-to-end employee computing experience, defining clear service expectations, success metrics, and operational health indicators Identify and eliminate friction across devices, access systems, and collaboration tools using data, user feedback loops, and root-cause analysis Drive measurable improvements in time-to-productivity and end-user satisfaction by standardizing core workflows and reducing variation
• Identity, Access, and Device Trust Engineer and support user lifecycle workflows within Microsoft Entra ID, including automation, guardrails, and documented standards Partner with Information Security to implement and refine conditional access and device trust controls using test-first validation, staged rollout, and rollback plans Support access reviews, privileged access visibility, and audit inquiries by producing repeatable evidence and standard reports for users and endpoints
• Endpoint Engineering (Windows & macOS) Design, deploy, and maintain endpoint management platforms for macOS and Windows with an engineering approach to reliability, observability, and change control Standardize device provisioning, reference configurations, and security baselines; implement automated pre-deployment validation to ensure changes are safe and repeatable Reduce manual support and change risk through automation, self-service, and standard patterns; continually reduce recurring incidents through problem management
• Collaboration & Productivity Platforms Own the end-user technical experience across Microsoft 365 (Outlook, Teams, OneDrive, SharePoint), including configuration standards and lifecycle planning Partner with Legal and business stakeholders on SharePoint access models and collaboration integrations, producing standard patterns and clear decision records Improve collaboration effectiveness while maintaining governance and security standards through planned change, automated validation, and clear operational ownership
• Email & User Security Experience Support and improve user interaction with email security controls (e.g., spam filtering and quarantines) with a focus on usability, measurement, and continuous improvement Balance strong security protections with low-friction, user-friendly workflows by validating changes before rollout and maintaining standard, supportable configurations
• Remote Access Enablement Support secure and scalable remote access models for a hybrid workforce, including standard client configurations and support runbooks Collaborate with Networking and Security teams to ensure remote access solutions are reliable and intuitive through proactive monitoring, regular validation, and controlled change
• Audit, Compliance, and Cross-Team Collaboration Provide user, device, and access artifacts for audits and leadership reviews through consistent processes, repeatable reporting, and clear ownership Support investigations requiring endpoint or identity context by following standard intake and escalation processes and maintaining high-quality documentation Act as a trusted EUC engineering partner across IT, Security, and Engineering teams by driving standardization, improving change processes, and mentoring others in engineering rigor

Technology Stack Microsoft Entra ID (Azure AD) Jamf (macOS) Microsoft endpoint management tooling (Windows) Microsoft 365 (Outlook, Teams, OneDrive, SharePoint) Email security platforms (e.g., Mimecast) Automation and validation tooling (e.g., scripting, policy/configuration testing frameworks, monitoring and reporting) Corporate VPN and secure remote access solutions

Qualifications 7+ years of experience in End User Computing, Endpoint Engineering, Identity & Access, or related infrastructure engineering roles Strong hands-on experience with Microsoft Entra ID, endpoint management platforms, and Microsoft 365, including automation and operational troubleshooting Proven ability to balance security requirements with end-user experience through risk-based decisions, clear standards, and measurable outcomes Experience designing, automating, and standardizing EUC solutions using a test-first approach (defined acceptance criteria and automated validation before rollout) Strong communication skills and ability to lead through influence, drive cross-team process adoption, and mentor engineers and administrators

Success Criteria (2026 Focus) Improved employee satisfaction with devices, access, and collaboration tools, supported by measurable experience and reliability indicators Reduced onboarding time and faster time-to-productivity through standardized builds, documented workflows, and automation Decreased recurring endpoint and access-related incidents through proactive remediation, standardization, and root-cause elimination Strong audit and security outcomes without degrading usability, enabled by well-governed, test-first change practices Clear, documented, and repeatable EUC engineering standards with broad adoption, plus reduced change failures through automated validation and disciplined rollout

The salary range for this opportunity is $96,600 to $135,300. Compensation depends on several factors: qualifications, skills, competencies, and experience. Tivity Health offers a robust benefits package, which includes a competitive salary, company bonus potential, medical, dental, vision, 401k with match, generous paid time off, free gym membership to over 13,000 fitness locations in the US, and other great benefits.

About Tivity Health® Inc. Tivity Health, Inc. is a leading provider of healthy life-changing solutions, including SilverSneakers®, ForeverFit®, and WholeHealth Living®. We help adults improve their health and support them on life's journey by providing access to in-person and virtual physical activity, social and mental enrichment programs, as well as a full suite of physical medicine and integrative health services. Our suite of services support health plans, employers, health systems and providers nationwide as they seek to reduce costs and improve health outcomes. Learn more at TivityHealth . Tivity Health is an equal employment opportunity employer and is committed to a proactive program of diversity development. Tivity Health will continue to recruit, hire, train, and promote into all job levels without regard to race, religion, gender, marital status, familial status, national origin, age, mental or physical disability, sexual orientation, gender identity, source of income, or veteran status.