Senior Endpoint Engineer

We are adding a Senior Endpoint Engineer to enhance endpoint security, patching, and VDI operations across Windows 11 devices and Azure Virtual Desktop. You will lead Intune and MECM execution, image management, and escalation support while keeping Microsoft 365 integrations running smoothly—apply now

Responsibilities

• Deliver roadmap-aligned technology and products with timely, high-quality outcomes
• Provide expert advice and direction to execute plans and procedures, ensuring schedule attainment and adherence to product development processes
• Serve as the final escalation tier for operations and support teams by completing root cause and preventative analysis
• Act as an escalation point for Desktop Operations on End User Computing matters, with focus on Endpoint Security Protection and application management
• Collaborate with other Engineering teams to develop integrated solutions
• Manage Azure Virtual Desktop (AVD) operations including image creation, VM deployment, and performance monitoring
• Build automated solutions to deploy software packages, application patches, updates, and workstation images
• Engineer and support multiple Windows desktop images
• Oversee lifecycle management for global standard desktop and laptop models
• Design and implement Microsoft Intune solutions to meet end user requirements
• Create and manage Intune policies for application deployment, device compliance, and security configurations
• Ensure seamless integration with other Microsoft 365 services
• Design and deploy Windows 11 provisioning using Intune Autopilot, configure Windows Update for Business policies, and maintain standardized deployment images
• Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies, coordinating with the Active Directory team
• Implement security best practices and compliance policies within Intune, monitor and respond to security incidents related to mobile devices and endpoints
• Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings
• Maintain desktop images and modify SCCM task sequences as needed
• Package, test, and deploy new applications as required
• Maintain and expand the existing Knowledge Base
• Create and update support documents to uphold high standards in End User Computing service delivery

Requirements

• At least 3 years of experience designing and implementing Microsoft Intune solutions while working as a system engineer
• Enterprise experience in desktop engineering and support
• Proven expertise in Windows 11, Active Directory structure, and Group Policy management
• Experience creating and testing software packages using InstallShield or similar tools
• Experience managing VDI environments, preferably Azure Virtual Desktop
• Advanced knowledge in Endpoint Protection Engineering
• Proficiency in MECM and Intune for endpoint management
• Strong patch management knowledge including bios and firmware updates, service pack upgrades, and application-based updates
• Basic database administration experience, especially with SQL Server
• Effective written and verbal communication skills
• Strong organizational and problem-solving abilities
• Excellent teamwork skills and motivation for professional growth
• Fluent English at B2+ (Upper-Intermediate) or higher, written and spoken