Endpoint Engineer

• Manage and maintain the organisation’s Windows endpoint estate.
• Administer and manage Microsoft Intune for device configuration, compliance, application deployment, and endpoint management.
• Support Windows Autopilot and modern device provisioning and deployment.
• Manage endpoint configuration through Intune, Group Policy, and other management platforms.
• Package, test, deploy, and maintain applications across the endpoint environment.
• Manage Windows updates, patching, feature upgrades, and endpoint lifecycle activities.
• Develop and maintain endpoint configuration and security baselines.
• Support and manage Microsoft Defender for Endpoint, including endpoint protection, security policies, device investigations, and remediation.
• Work with the Cyber Security team to investigate and resolve endpoint security alerts and vulnerabilities.
• Monitor endpoint health, compliance, performance, and security posture.
• Use PowerShell to automate endpoint administration, reporting, deployment, and troubleshooting activities.
• Troubleshoot complex Windows, application, device, and endpoint management issues.
• Provide escalation support to the Service Desk for complex endpoint-related incidents.
• Manage device compliance and integration with Microsoft Entra ID and Conditional Access.
• Support endpoint encryption, authentication, security controls, and other endpoint protection technologies.
• Contribute to vulnerability remediation and endpoint hardening activities.
• Maintain technical documentation, configuration standards, and operational procedures.
• Assist with endpoint technology projects, migrations, upgrades, and improvements.
• Identify opportunities to improve endpoint management through automation and modernisation.
• Work with vendors and third-party suppliers where required.
• Ensure endpoint services meet organisational security, compliance, and operational requirements.

Birmingham, 2-3 days onsite - must be eligible for SC or have active SC The ideal candidate will have strong experience with modern endpoint management technologies, particularly Microsoft Intune, Windows, Active Directory, Entra ID, and PowerShell, along with practical experience using Microsoft Defender for Endpoint., * Proven experience working as an Endpoint Engineer, EUC Engineer, Desktop Engineer, or similar role.

• Strong experience administering Windows 10/11 in an enterprise environment.
• Hands-on experience with Microsoft Intune.
• Good knowledge of Microsoft Entra ID (Azure AD) and device management.
• Strong understanding of Active Directory and Group Policy.
• Experience with application deployment and packaging.
• Experience managing Windows updates, patching, and endpoint configuration.
• Practical experience with Microsoft Defender for Endpoint and a good understanding of endpoint security.
• Strong PowerShell scripting and automation skills.
• Good understanding of endpoint security, device compliance, encryption, and vulnerability management.
• Strong troubleshooting and problem-solving skills.
• Ability to investigate and resolve complex technical issues independently.
• Good understanding of ITIL processes, including incident, problem, and change management.
• Strong communication skills and the ability to work effectively with both technical and non-technical teams.