> Markdown version of [/jobs/ext/4710858-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/4710858-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Engineer - **Company:** Fitch - **Location:** Epsom, United Kingdom - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Microsoft Windows, Active Directory, Artificial Intelligence, Data Analysis, Application Lifecycle Management, Application Packaging, Microsoft Azure, BIOS, Mobile Application Development, Command-Line Interface, Configuration Management, Computer Networks, System Configuration, Dynamic Host Configuration Protocol, Programming Tools, Domain Name System (DNS), Firmware, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), System Center Configuration Manager, Windows API, Networking Basics, Windows PowerShell, Microsoft Copilot, Zero Trust Network Access, Runbook, Software Deployment, User Environment Management, Visual Studio Online, Software Vulnerability Management, Wi-Fi Technology, Enterprise Software Applications, Performance Testing, Large Language Models, Claude Code, Hardware Testing, Git, Microsoft InTune, Git Flow, Deployment Automation, Ollama, Machine Learning Operations, Software Version Control - **Published:** November 14, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/endpoint-engineer/56412415 ## About the Role 3-5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in: Microsoft Intune (Endpoint Manager), MECM, and co-management services Active Directory and Directory Services, including Group Policy and RSAT tools Intune configuration and compliance policy management LAPS and least-privilege / privilege elevation models (e.g., Privilege Management) Microsoft 365 Apps deployment, configuration, and update servicing Networking fundamentals (DNS, DHCP, VPN, Proxy) Strong experience with modern Intune management, including: Windows Autopilot (user-driven, pre-provisioning, self-deploying) Zero-touch provisioning and cloud-first imaging strategies Intune application management (Win32, MSI, MSIX, store apps, managed apps) Settings Catalog, Compliance Policies, and Configuration Profiles Device Filters, Dynamic Groups, and scalable targeting strategies Endpoint Analytics and digital experience monitoring (DEX) Hardware validation and lifecycle management, including: Hardware and performance testing/benchmarking to support fleet standardization decisions Firmware and BIOS update management and deployment (e.g., HP, Dell) Wi-Fi driver troubleshooting and remediation across the device fleet 802.1X / WPA2-Enterprise network authentication troubleshooting (EAP-TLS, RADIUS) Proficiency with Windows PowerShell, including: Running, creating, and editing PowerShell scripts Managing system processes and services via PowerShell Understanding basic command syntax and parameters Experience supporting Zero Trust, conditional access, and identity-based access controls. Developer tooling and AI workload support, including: Configuring and troubleshooting VS Code, Python, and common CLI/developer environments Git-based version control workflows Endpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing) Applying governance and device-management guardrails to developer and AI tooling without blocking productivity Ability to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks. Demonstrated ownership mindset, with a focus on eliminating root causes and improving user experience. What Would Make You Stand Out: PowerShell App Deployment Toolkit (PSADT) - creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic. Advanced MECM collection design and query creation. Windows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed). Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN). Experience with third-party patching platforms (e.g., Patch My PC). Strong PowerShell automation expertise and familiarity with Git-based workflows. Experience with vulnerability management tools and endpoint telemetry/observability platforms. Experience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU-accelerated workstations. Microsoft certifications related to Endpoint, Azure, or Security. ## Description Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles. How You'll Make an Impact: Endpoint Platform Engineering (Windows CSP / Intune) Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture. Design and maintain consolidated, well-governed CSP policy structures across the fleet. Hardware Fleet & Device Lifecycle Drive vendor-led firmware and driver lifecycle management - including HP Image Assist and Dell Command Update automations - to improve device stability and end-user experience. Troubleshoot and remediate audio, video, and conferencing reliability issues. Perform hardware and performance testing/benchmarking to support fleet standardization decisions. Modernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency. Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline. Complete remaining GPO-to-CSP transitions in support of provisioning consistency. Application & Configuration Management Package, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements. Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives. Developer Tooling & AI Workload Enablement Configure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards. Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing. Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (e.g., Claude Code, Copilot) within governance and device-management guardrails. Operations & Support Deliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination. Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring. Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement. Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations. Documentation & Cross-Functional Collaboration Create and maintain technical documentation, runbooks, and cross-team knowledge resources. Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management. Act as an owner by proactively driving issues to resolution across business