Endpoint Engineer

• Provide advanced Tier 2/3 support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies.
• Migrate legacy Group Policy configurations to modern CSP-based Intune policy and resolve policy conflicts.
• Design and maintain governed CSP policy structures across the fleet.
• Drive vendor-led firmware and driver lifecycle management to improve stability and user experience.
• Troubleshoot and remediate audio, video, and conferencing reliability issues.
• Perform hardware and performance testing and benchmarking to support fleet standardization decisions.
• Modernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency.
• Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline.
• Complete remaining GPO-to-CSP transitions in support of provisioning consistency.
• Package, test, and deploy enterprise applications using MECM and Intune.
• Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards.
• Configure, package, and support developer tooling across the fleet.
• Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime sizing.
• Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools within governance guardrails.
• Deliver advanced incident and problem resolution with a focus on user experience and root-cause elimination.
• Execute patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.
• Partner with the Service Desk to improve workflows and reduce recurring issues through automation or policy enhancements.
• Participate in an on-call rotation for critical after-hours incidents and high-priority escalations.
• Create and maintain technical documentation, runbooks, and cross-team knowledge resources.
• Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management.
• Proactively drive issues to resolution across business teams.

Technologies:

• AI
• Active Directory
• Azure
• Cloud
• Firmware
• Git
• Hardware
• Support
• LLM
• Microsoft 365
• Microsoft Intune
• PowerShell
• Python
• Security
• VPN
• VS Code
• Windows
• Office 365
• Claude Code
• Copilot
• Embedded
• Network

• 3-5+ years of experience in enterprise endpoint engineering or advanced support.
• Hands-on experience with Windows 11, Azure AD / Entra ID, Microsoft Intune, MECM, and co-management services.
• Experience with Active Directory and Directory Services, including Group Policy and RSAT tools.
• Strong knowledge of Intune configuration and compliance policy management.
• Experience with LAPS and least-privilege or privilege elevation models.
• Experience deploying, configuring, and servicing Microsoft 365 Apps.
• Understanding of networking fundamentals, including DNS, DHCP, VPN, and proxy.
• Strong experience with modern Intune management, including Windows Autopilot and zero-touch provisioning.
• Experience with Intune application management, including Win32, MSI, MSIX, store apps, and managed apps.
• Experience with Settings Catalog, Compliance Policies, Configuration Profiles, Device Filters, Dynamic Groups, and scalable targeting strategies.
• Experience with Endpoint Analytics and digital experience monitoring.
• Experience with hardware validation, lifecycle management, firmware and BIOS updates, and Wi-Fi driver troubleshooting.
• Experience troubleshooting 802.1X / WPA2-Enterprise authentication issues.
• Proficiency with Windows PowerShell, including scripting, process and service management, command syntax, and error troubleshooting.
• Experience supporting Zero Trust, conditional access, and identity-based access controls.
• Experience configuring and troubleshooting developer tooling such as VS Code, Python, Git, and common CLI environments.
• Experience supporting endpoint requirements for AI/ML workloads, including GPU drivers, WSL2/containers, local model runtimes, and resource sizing.
• Ability to apply governance and device-management guardrails to developer and AI tooling without reducing productivity.
• Strong collaboration, communication, documentation, and runbook writing skills.
• Demonstrated ownership mindset focused on root-cause elimination and user experience improvement.
• Experience with PowerShell App Deployment Toolkit is a plus.
• Advanced MECM collection design and query creation are a plus.
• Experience with Windows imaging modernization, such as Autopilot, zero-touch provisioning, and DISM, is a plus.
• Familiarity with software packaging technologies such as EXE, MSI, MSIX, and INTUNEWIN is a plus.
• Experience with third-party patching platforms is a plus.
• Strong PowerShell automation expertise and familiarity with Git-based workflows are a plus.
• Experience with vulnerability management tools and endpoint telemetry or observability platforms is a plus.
• Experience supporting local AI/LLM developer tooling and GPU-accelerated workstations is a plus.
• Microsoft certifications related to Endpoint, Azure, or Security are a plus.

We are Fitch Group, a global financial information services provider delivering credit and risk insights, robust data, and dynamic tools that help create more efficient and transparent financial markets. Based in our London office, this Endpoint Engineer role sits within our global infrastructure organization and supports a modern, AI-enabled Technology & Data team across a diverse international business. We offer a hybrid work environment with 2 to 3 days in the office each week, along with learning and mobility opportunities, leadership development, mentorship, retirement planning, financial wellness support, tuition reimbursement, comprehensive healthcare, generous global parental leave, paid volunteer days, and a culture recognized as a Best Place to Work in Technology for three years in a row.