EUC Engineer (Intune, Defender & Entra ID)

• Own and manage Windows 11, iOS, and Android endpoints using Microsoft Intune, including Autopilot provisioning, device configuration, compliance policies, patching, update management, and application deployment
• Maintain endpoint security standards, device lifecycle management, and secure configuration baselines aligned to Microsoft and industry best practices
• Administer and support Microsoft Defender for Endpoint, including alert triage, investigation, machine isolation, remediation activities, and EDR-related security operations
• Manage Attack Surface Reduction (ASR) policies, device control policies, endpoint security settings, and Intune security baselines
• Create, maintain, and improve endpoint compliance frameworks aligned to organisational security policies and recognised security benchmarks
• Manage identity and access through Entra ID, including Conditional Access, MFA, device compliance, device registration, and identity-related troubleshooting
• Investigate and resolve complex endpoint, identity, and security incidents, acting as a senior technical escalation point across the business
• Deliver vulnerability remediation and patch management activities in line with business risk and security requirements
• Develop automation and operational improvements using PowerShell, Microsoft Graph, and Microsoft security tooling
• Contribute to IT projects including endpoint refreshes, office moves, infrastructure upgrades, and technology improvements
• Produce and maintain high-quality technical documentation and end-user knowledge articles

Technologies:

• Android
• Azure
• Support
• Microsoft Intune
• PowerShell
• Security
• Windows
• iOS
• Cloud
• Mobile, We are a well-established financial services firm based in Central London, and we are seeking an experienced EUC Engineer to join our small, high-performing IT team. This is a hands-on role with real ownership of our Microsoft Intune, Defender for Endpoint, and Entra ID environments, with a strong focus on endpoint security, device compliance, EDR investigations, identity controls, and modern endpoint management across the business. The role is primarily office-based, with four days per week in our London office near London Bridge and one day working from home. We offer a salary of £45,000-£60,000 per annum, depending on experience, and an excellent opportunity to make a meaningful impact in a close-knit team while strengthening our endpoint security, compliance, and operational stability.

• 4-5 years experience in endpoint engineering, EUC engineering, modern workplace, or senior 2nd line roles within financial services, professional services, SME, or MSP environments
• Hands-on ownership of Microsoft Intune, including device management, compliance policies, application deployment, and endpoint configuration
• Strong practical experience administering Microsoft Defender for Endpoint, including security alert investigation, EDR capabilities, remediation activities, and endpoint security management
• Good understanding of endpoint security principles, including security baselines, hardening, Attack Surface Reduction policies, vulnerability management, and compliance controls
• Strong experience with Entra ID, including Conditional Access, MFA, device compliance, and identity management
• Strong Windows 11 troubleshooting and endpoint engineering skills
• Experience using PowerShell and Microsoft Graph for automation and operational improvements
• Confident troubleshooting complex endpoint, identity, access, and security-related issues
• Excellent communication skills with a proactive, ownership-driven approach
• Desirable: experience supporting Microsoft Secureworks MDR environments
• Desirable: exposure to Meraki networking technologies
• Desirable: exposure to Egnyte governance and collaboration platforms
• Desirable: experience supporting Azure infrastructure services