Endpoint Engineer

• Manage and maintain the organisation’s Windows endpoint estate, including configuration, compliance, application deployment, and lifecycle management via Microsoft Intune, Group Policy, and other management platforms.

• Support Windows Autopilot and modern device provisioning and deployment.

• Package, test, deploy, and maintain applications across the endpoint environment.

• Manage Windows updates, patching, feature upgrades, and endpoint lifecycle activities.

• Develop and maintain endpoint configuration and security baselines.

• Support and manage Microsoft Defender for Endpoint, including security policies, device investigations, and remediation, working with the Cyber Security team to investigate and resolve endpoint security alerts and vulnerabilities.

• Monitor endpoint health, compliance, performance, and security posture.

• Use PowerShell to automate endpoint administration, reporting, deployment, and troubleshooting activities.

• Troubleshoot complex Windows, application, device, and endpoint management issues, providing escalation support to the Service Desk for complex incidents.

• Manage device compliance and integration with Microsoft Entra ID and Conditional Access.

• Support endpoint encryption, authentication, and other protection technologies, contributing to vulnerability remediation and endpoint hardening.

• Maintain technical documentation, configuration standards, and operational procedures.

• Assist with endpoint technology projects, migrations, upgrades, and improvements, working with vendors and third-party suppliers where required.

• Identify opportunities to improve endpoint management through automation and modernisation, ensuring endpoint services meet organisational security, compliance, and operational requirements.

2-3 days onsite - must be eligible for SC or have active SC

The ideal candidate will have strong experience with modern endpoint management technologies, particularly Microsoft Intune, Windows, Active Directory, Entra ID, and PowerShell, along with practical experience using Microsoft Defender for Endpoint., * Proven experience as an Endpoint Engineer, EUC Engineer, Desktop Engineer, or similar role.

• Strong experience administering Windows 10/11 in an enterprise environment.

• Hands-on experience with Microsoft Intune.

• Good knowledge of Microsoft Entra ID (Azure AD) and device management.

• Strong understanding of Active Directory and Group Policy.

• Experience with application deployment and packaging.

• Experience managing Windows updates, patching, and endpoint configuration.

• Practical experience with Microsoft Defender for Endpoint and a good understanding of endpoint security.

• Strong PowerShell scripting and automation skills.

• Good understanding of device compliance, encryption, and vulnerability management.

• Strong troubleshooting and problem-solving skills, able to investigate and resolve complex issues independently.

• Good understanding of ITIL processes, including incident, problem, and change management.

• Strong communication skills and the ability to work effectively with both technical and non-technical teams