A device endpoint is accessed through an off-premise communications network relative to the device endpoint. The device endpoint is registered to a virtual device object in data storage of a device service, the device service and the device endpoint communicating across the off-premise communications network, the virtual device object storing a secure device endpoint identifier of the device endpoint. A virtual device identifier associated with the secure device endpoint identifier of the device endpoint is stored in the virtual device object. A request to access the device endpoint using the virtual device identifier is received. The secure device endpoint identifier associated with the virtual device identifier in the virtual device object is read. The device endpoint is notified of a pending job associated with the secure device endpoint identifier. The pending job is communicated to the device endpoint identified by the secure device endpoint identifier.