Senior Endpoint Engineer

We are seeking a Senior Endpoint Engineer to drive stable and secure Windows endpoint experiences across laptops, desktops, and Azure Virtual Desktop sessions. You will own Intune engineering, Windows 11 provisioning, and escalation support while improving packaging and patching automation—apply now

Responsibilities

• Deliver roadmap commitments by producing high-quality technology and products on schedule
• Provide expert direction to follow plans and procedures, helping ensure schedule attainment and alignment with product development processes
• Operate as the top escalation tier for operations and support teams, completing root cause and preventative analysis
• Serve as an escalation contact for Desktop Operations on End User Computing topics, focusing on Endpoint Security Protection and application management
• Coordinate with other Engineering teams to create integrated solutions
• Run the Azure Virtual Desktop (AVD) environment, covering image creation, VM deployment, and performance monitoring
• Create automated solutions for deploying software packages, application patches, updates, and workstation images
• Engineer and support multiple Windows desktop images
• Manage the lifecycle for global standard desktop and laptop models
• Design and implement Microsoft Intune solutions that meet end user requirements
• Create and manage Intune policies for application deployment, device compliance, and security configurations
• Ensure seamless integration with other Microsoft 365 services
• Design and deploy Windows 11 provisioning processes via Intune Autopilot, configure Windows Update for Business policies, and maintain standardized deployment images
• Design and manage Active Directory Group Policy Objects (GPOs) to enforce security and configuration policies, working with the Active Directory team
• Implement security best practices and compliance policies in Intune, then monitor and respond to security incidents involving mobile devices and endpoints
• Produce detailed documentation for Intune configurations, Windows provisioning processes, and Group Policy settings
• Maintain desktop images and update SCCM task sequences as necessary
• Package, test, and deploy new applications as required
• Maintain and expand the existing Knowledge Base
• Create and update support documents to sustain high standards for End User Computing service delivery

Requirements

• Professional experience of 3+ years designing and implementing Microsoft Intune solutions as a system engineer
• Background in desktop engineering and support within an enterprise environment
• Strong expertise with Windows 11, Active Directory structure, and Group Policy management
• Hands-on experience developing and testing software packages with InstallShield or similar tools
• Experience operating VDI environments, with preference for Azure Virtual Desktop
• Advanced knowledge in Endpoint Protection Engineering
• Proficiency using MECM and Intune for endpoint management
• Strong skills in patch management, including bios and firmware updates, service pack upgrades, and application-based updates
• Basic database administration skills, especially with SQL Server
• Effective verbal and written communication skills
• Strong organizational and problem-solving capabilities
• Excellent teamwork skills and drive for professional growth
• Fluent English (B2+ Upper-Intermediate or above), written and spoken