IT Identity & MDM Analyst

At ThinkProject, we're modernising the built-asset industry, which means we need our business functions to be optimised for efficiency. This role will play a key role in ensuring that ThinkProject's identity and endpoint services remain secure, compliant and operationally efficient.

This role will work as part of a small team focusing on securing and optimising user access, device compliance, and lifecycle management across a mixed OS estate, leveraging Microsoft Intune, Entra ID (Azure AD), and modern endpoint management practices (i.e. Autopilot, Conditional access).

Main Responsibilities

Operations:

• Administer and support identity services using Microsoft Entra ID (Azure AD), supporting the consistent execution and continual review/optimisation of user lifecycle process (i.e. Joiners, Movers and Leavers).
• Configure and maintain authentication methods (MFA, SSO, Conditional Access), in line with Thinkproject policies, in collaboration with internal Security specialists.
• Proactively monitor end user devices and software compliance via MDM solution, taking appropriate actions through standard incident management and alerting processes.
• Support end user device enrolment, configuration and compliance policies. Support the end-to-end lifecycle of corporate devices in collaboration with the IT Field Support Manager, utilising Microsoft Intune, Apple Business Manager (ABM) and related technologies.
• Create/Update Standard Operating Procedures (SOPs) to support consistent process execution or to scope automation, while promoting knowledge sharing across the wider Central IT Team.
• Manage own workload in line with project priority, incident urgency, whilst always complying with the Change management process.
• Deliver change through policies, integrations, application packaging etc, using a robust methodology to ensure successful deployments.
• Triage, investigate and resolve incident tickets in line with agreed Service Level Agreements (SLAs).
• Create/maintain application deployment packages for Windows and MacOS, and act as the gatekeeper of approved software in Company Portal.
• When required provide support to wider Cloud and Workplace Engineering owned technologies, including but not limited to Azure, O365, SharePoint etc.
• Ensure technical documentation is maintained, deliver training to wider CIT teams when required.

Risk & Compliance:

• Where required, support the audit activities as a subject matter expert. Supporting remediation and evidence gathering.
• Highlight technical and compliance risks, working with Compliance, Security and Data Protection colleagues.
• Consistently review and audit core process to ensure ongoing compliance, through scheduled access reviews, device audits etc.

Innovation & Continuous Improvement:

• Drive industry standards in relation to role-based access control and least-privilege approach.
• Identify opportunities to improve automation, compliance and user experience. Utilising PowerShell/ Microsoft Graph or Agentic solutions where appropriate.
• Work alongside the Service Desk and Regional Support team to investigate re-occurring tickets to increase the effectiveness of our support service.
• Evaluate new capabilities that improve identity security and endpoint management.
• Contribute to the Cloud and Workplace Engineering roadmap.

• Proven experience in MDM and Identity management solutions within a global enterprise environment.

• Experience in managing Joiner/Mover and Leaver processes.

• Practical experience in the below technologies:

• Microsoft Defender for Endpoint

• O365 Administration

• PowerShell & Microsoft Graph API

• Autopilot

• Azure AD Connect / Entra Connect

Qualifications:

Desirable not essential

• Microsoft Certified: Endpoint Administrator
• or Identity and Access Administrator Associate.
• ITIL Foundation Certificate

What we offer

Hybrid working | Work from abroad | Flexible working hours | Udemy Access | Thinkproject Academy | Free English lessons | Unlimited learning | Headspace community access | Women's Network | Corporate volunteering | Social events | Open forum with the Leadership Team (TP Café)

thinkproject was founded in 2000 in Munich, Germany. Since then, the company has grown into the leading provider for cross-enterprise collaboration and information management in Europe.

Global customers from the construction and engineering industries are served from thinkproject’s home base in Munich and via a range of subsidiaries across Europe.

thinkproject addresses today’s digitization challenges in construction and engineering by providing state-of-the-art software solutions as well as industry expert consulting and services.