Endpoint Engineer

At Swissquote, we’re all in.
All in to shake things up. All in to build the bank people actually want to use. All in to make finance less boring — and a lot more powerful.

We’re Switzerland’s leading digital bank — 1,400+ people across Europe, the Middle East and Asia, building real financial solutions for over a million clients worldwide. From trading and investing to everyday banking, we cover the full picture. We move fast, but we build things we’re genuinely proud of. Have a look behind the scenes by checking

Humans of Swissquote on Instagram.

Growing fast creates room. Room to try things, own things, and grow at a pace most places can’t offer. Whether you like the spotlight or prefer to just put your head down and do great work, there’s space for both here.

We’ve ditched the dress code — but never the chance to celebrate. Big win or small, we make it count. The kind of place where the atmosphere takes care of itself.

As an equal opportunity employer, we welcome candidates from all backgrounds, experiences and perspectives to join our team and contribute to our shared success.

Feeling it? It’s a good start.

The Endpoint Engineer is a key member of the Endpoint Administration & Protection team, responsible for the management, compliance, protection and lifecycle of corporate endpoints across the organisation. The role brings specialist expertise in macOS and mobile platforms including iOS, iPadOS and Android, complementing the team's existing Windows capabilities. Working primarily with Microsoft Intune and Microsoft Defender for Endpoint, the Endpoint Engineer ensures that endpoints remain secure, compliant, operational and aligned with business and security requirements.

The successful candidate is curious, adaptable and proactive, continuously seeking opportunities to improve the endpoint experience, increase automation and strengthen endpoint security posture.

macOS and Mobile Device Management

• Act as the primary technical specialist for macOS, iOS, iPadOS and Android endpoint management.
• Design, implement and maintain device management capabilities using Microsoft Intune and platform-native technologies.
• Manage Apple Business Manager integration, Automated Device Enrollment (ADE) and Apple device lifecycle processes.
• Manage Android Enterprise enrollment models and operational administration.
• Ensure devices are enrolled, compliant, properly configured and supported throughout their lifecycle.
• Troubleshoot complex device management, enrollment and configuration issues across supported platforms.
• Provide technical guidance and documentation for endpoint administrators, Service Desk teams and stakeholders.

Intune Compliance and Configuration Management

• Design, implement and maintain Microsoft Intune configuration profiles, device restrictions and endpoint management policies.
• Develop and maintain device compliance policies and compliance reporting across all supported platforms.
• Support integration between compliance policies and Conditional Access controls in collaboration with Identity and Information Security teams.
• Maintain enrollment methods and provisioning workflows, including awareness of Windows Autopilot processes and integration points.
• Monitor platform health, configuration drift and policy effectiveness.
• Continuously evaluate new Microsoft Intune capabilities and recommend adoption where business value exists.

Endpoint Protection and Microsoft Defender for Endpoint

• Own the operational health and enforcement of Microsoft Defender for Endpoint across Windows, macOS and mobile platforms.
• Ensure Defender onboarding, deployment, policy assignment, reporting and agent health remain at target service levels.
• Implement and maintain endpoint security controls defined by Information…