Endpoint Engineer

• Manage and maintain our Windows endpoint estate, including configuration, compliance, application deployment, and lifecycle management via Microsoft Intune, Group Policy, and other management platforms.
• Support Windows Autopilot and modern device provisioning and deployment.
• Package, test, deploy, and maintain applications across our endpoint environment.
• Manage Windows updates, patching, feature upgrades, and endpoint lifecycle activities.
• Develop and maintain endpoint configuration and security baselines.
• Support and manage Microsoft Defender for Endpoint, including security policies, device investigations, and remediation, working with our Cyber Security team to investigate and resolve endpoint security alerts and vulnerabilities.
• Monitor endpoint health, compliance, performance, and security posture.
• Use PowerShell to automate endpoint administration, reporting, deployment, and troubleshooting activities.
• Troubleshoot complex Windows, application, device, and endpoint management issues, providing escalation support to the Service Desk for complex incidents.
• Manage device compliance and integration with Microsoft Entra ID and Conditional Access.
• Support endpoint encryption, authentication, and other protection technologies, contributing to vulnerability remediation and endpoint hardening.
• Maintain technical documentation, configuration standards, and operational procedures.
• Assist with endpoint technology projects, migrations, upgrades, and improvements, working with vendors and third-party suppliers where required.
• Identify opportunities to improve endpoint management through automation and modernisation, ensuring endpoint services meet our security, compliance, and operational requirements.

Technologies:

• Active Directory
• Azure
• Support
• ITIL
• Microsoft Intune
• PowerShell
• Security
• Windows
• Cloud
• DevOps, We are seeking an experienced Endpoint Engineer to help us manage and improve our modern Windows endpoint environment. This role focuses on Microsoft Intune, Windows, Active Directory, Entra ID, PowerShell, and Microsoft Defender for Endpoint. The position requires 2-3 days onsite each week and SC eligibility or active SC clearance. You will work closely with our Cyber Security team, Service Desk, vendors, and third-party suppliers to support secure, compliant, and efficient endpoint services across the organisation.

• Proven experience as an Endpoint Engineer, EUC Engineer, Desktop Engineer, or in a similar role.
• Strong experience administering Windows 10/11 in an enterprise environment.
• Hands-on experience with Microsoft Intune.
• Good knowledge of Microsoft Entra ID (Azure AD) and device management.
• Strong understanding of Active Directory and Group Policy.
• Experience with application deployment and packaging.
• Experience managing Windows updates, patching, and endpoint configuration.
• Practical experience with Microsoft Defender for Endpoint and a good understanding of endpoint security.
• Strong PowerShell scripting and automation skills.
• Good understanding of device compliance, encryption, and vulnerability management.
• Strong troubleshooting and problem-solving skills, able to investigate and resolve complex issues independently.
• Good understanding of ITIL processes, including incident, problem, and change management.
• Strong communication skills and the ability to work effectively with both technical and non-technical teams.
• Must be eligible for SC clearance or have active SC.
• Able to work onsite 2-3 days per week.