Modern Workplace Engineer

amplify5 is partnering with a UK-based organisation operating at the forefront of the global luxury retail sector to recruit a Modern Workplace Engineer for our Cape Town team. Supporting a business that collaborates with premium international brands and operates across multiple global markets, this role offers the opportunity to shape the future of a core enterprise platform that supports complex retail operations worldwide.

As a Modern Workplace Engineer, you will play a key role in shaping and managing the organisation’s modern workplace platform, with a strong focus on Microsoft Intune and endpoint management across Windows, Mac, iPad and Android devices. Working closely with technology leaders and cross-functional stakeholders, you will design, implement and maintain secure, consistent and supportable device environments while ensuring the platform remains aligned with the wider technology strategy.

This role combines technical ownership, platform management and third-line support, ensuring the modern workplace environment continues to deliver a secure and seamless experience for corporate users. You will also contribute to Microsoft 365 administration, collaboration, identity and automation, while proactively keeping pace with the Microsoft roadmap and balancing security, user experience and supportability.

In this role you will take ownership of the organisation’s modern endpoint management environment, managing Microsoft Intune, configuration and compliance policies, Conditional Access and endpoint security across Windows 11 and Apple devices. You will ensure devices remain secure, compliant and consistently configured in line with Microsoft and CIS best practice.

You will own the end-to-end device lifecycle, including Windows Autopilot, Apple Automated Device Enrolment, application deployment, Windows Updates, driver management and secure device retirement. You will maintain accurate inventory and ensure users receive reliable and well-managed device experience.

You will drive automation and proactive endpoint management using Power Shell, Intune Remediations, Microsoft Graph, Power Automate, Endpoint Analytics and Intune reporting. Through this, you will identify issues early, reduce manual administration and continuously improve the performance and reliability of the endpoint environment.

You will also act as a third-line technical escalation point, resolving complex incidents and performing root cause analysis while planning and testing changes through controlled pilot and deployment rings. You will help strengthen service desk capability and ensure changes are delivered safely, with clear acceptance criteria and rollback plans.

To succeed in this role, you will be able to demonstrate:

• 3+ years’ experience administering Microsoft Intune and Entra  primary endpoint management and identity tooling.
• Proven experience configuring Windows Autopilot and Apple Business Manager enrolment from the ground up.
• Strong practical experience designing and managing Windows Update Rings, including managing exceptions and resolving update-related issues.
• Sound understanding of Entra e identity, including registered, joined and hybrid joined devices, and the implications of each configuration.
• Expert-level knowledge in Microsoft Entra , Conditional Access, and device compliance, with proven experience designing and implementing Zero Trust security controls across complex enterprise environments.
• Strong Windows 11 and corporate device troubleshooting experience, with the ability to diagnose and resolve endpoint issues effectively.
• Practical Power Shell scripting experience across platform scripts, remediations, automation and reporting.
• Microsoft…