Endpoint Engineer

2-3 days onsite - must be eligible for SC or have active SC

The ideal candidate will have strong experience with modern endpoint management technologies, particularly Microsoft Intune, Windows, Active Directory, Entra , and Power Shell, along with practical experience using Microsoft Defender for Endpoint.

Key Responsibilities

* Manage and maintain the organisation's Windows endpoint estate, including configuration, compliance, application deployment, and lifecycle management via Microsoft Intune, Group Policy, and other management platforms.

* Support Windows Autopilot and modern device provisioning and deployment.

* Package, test, deploy, and maintain applications across the endpoint environment.

* Manage Windows updates, patching, feature upgrades, and endpoint lifecycle activities.

* Develop and maintain endpoint configuration and security baselines.

* Support and manage Microsoft Defender for Endpoint, including security policies, device investigations, and remediation, working with the Cyber Security team to investigate and resolve endpoint security alerts and vulnerabilities.

* Monitor endpoint health, compliance, performance, and security posture.

* Use Power Shell to automate endpoint administration, reporting, deployment, and troubleshooting activities.

* Troubleshoot complex Windows, application, device, and endpoint management issues, providing escalation support to the Service Desk for complex incidents.

* Manage device compliance and integration with Microsoft Entra  Conditional Access.

* Support endpoint encryption, authentication, and other protection technologies, contributing to vulnerability remediation and endpoint hardening.

* Maintain technical documentation, configuration standards, and operational procedures.

* Assist with endpoint technology projects, migrations, upgrades, and improvements, working with vendors and third-party suppliers where required.

* Identify opportunities to improve endpoint management through automation and modernisation, ensuring endpoint services meet organisational security, compliance, and operational requirements.

Essential Skills & Experience

* Proven experience as an Endpoint Engineer, EUC Engineer, Desktop Engineer, or similar role.

* Strong experience administering Windows 10/11 in an enterprise environment.

* Hands-on experience with Microsoft Intune.

* Good knowledge of Microsoft Entra  (Azure AD) and device management.

* Strong understanding of Active Directory and Group Policy.

* Experience with application deployment and packaging.

* Experience managing Windows updates, patching, and endpoint configuration.

* Practical experience with Microsoft Defender for Endpoint and a good understanding of endpoint security.

* Strong Power Shell scripting and automation skills.

* Good understanding of device compliance, encryption, and vulnerability management.

* Strong troubleshooting and problem-solving skills, able to investigate and resolve complex issues independently.

* Good understanding of ITIL processes, including incident, problem, and change management.

* Strong communication skills and the ability to work effectively with both technical and non-technical teams