Senior Endpoint Engineer

We are hiring a Senior Endpoint Engineer to ensure secure, efficient endpoint services for both physical Windows devices and Azure Virtual Desktop workspaces. You will improve and operate Microsoft Intune, Windows 11 provisioning, and VDI workflows while supporting Operations with escalation expertise—apply now

Responsibilities

• Deliver roadmap-driven technology and products with high quality and on-time execution
• Advise and guide stakeholders to follow plans and procedures, supporting schedule attainment and adherence to product development processes
• Provide last-line support for operations and support teams by executing root cause and preventative analysis
• Serve as the Desktop Operations escalation point for End User Computing topics, emphasizing Endpoint Security Protection and application management
• Partner with other Engineering teams to deliver integrated solutions
• Administer the Azure Virtual Desktop (AVD) environment by creating images, deploying VMs, and monitoring performance
• Implement automation to deploy software packages, application patches, updates, and workstation images
• Build and support multiple Windows desktop images
• Oversee lifecycle management for global standard desktop and laptop models
• Design and implement Microsoft Intune solutions based on end user requirements
• Define and maintain Intune policies for application deployment, device compliance, and security configurations
• Ensure smooth integration with other Microsoft 365 services
• Design and deploy Windows 11 provisioning with Intune Autopilot, set Windows Update for Business policies, and maintain standardized deployment images
• Design and manage Group Policy Objects (GPOs) within Active Directory to enforce security and configuration policies in coordination with the Active Directory team
• Apply security best practices and compliance policies in Intune, then monitor and respond to security incidents affecting mobile devices and endpoints
• Document Intune configurations, Windows provisioning processes, and Group Policy settings in detail
• Maintain desktop images and modify SCCM task sequences when needed
• Package, test, and deploy new applications upon request
• Maintain and expand the existing Knowledge Base
• Create and update support documentation to uphold End User Computing service delivery standards

Requirements

• Proven 3+ years of experience designing and implementing Microsoft Intune solutions while working as a system engineer
• Solid experience in desktop engineering and enterprise support operations
• In-depth knowledge of Windows 11, Active Directory structure, and Group Policy management
• Experience building and testing software packages using InstallShield or comparable tooling
• Working knowledge of VDI environments, ideally Azure Virtual Desktop
• Advanced understanding of Endpoint Protection Engineering
• Strong proficiency in MECM and Intune for endpoint management
• Strong patch management skills covering bios and firmware updates, service pack upgrades, and application-based updates
• Basic database administration experience, particularly with SQL Server
• Clear written and verbal communication skills
• Strong organizational skills with a problem-solving mindset
• Collaborative approach and motivation for ongoing professional growth
• Fluent English (B2+ Upper-Intermediate or higher), both written and spoken