EUC Engineer

• Configure and manage Microsoft Intune enrolment, compliance, configuration, update, security and application-deployment policies
• Design, build and test Windows Autopilot profiles and provisioning processes
• Implement and support Entra  patterns and modern device-registration and provisioning approaches
• Develop repeatable processes for enrolling, configuring and validating Windows devices at scale
• Prepare and execute endpoint pilots and migration waves
• Plan device migrations considering user-state, profiles, applications, configuration and data
• Deploy, configure and troubleshoot packaged applications, scripts and endpoint configuration
• Manage and troubleshoot certificates, VPN, security controls and Conditional Access dependencies
• Configure and support Microsoft Defender for Endpoint, Bit Locker and device compliance controls
• Investigate and resolve complex Windows, device, application, authentication and connectivity issues
• Analyse endpoint logs, Intune reporting, Windows event information and diagnostic data
• Collect and analyse device readiness, enrolment, compliance and migration data
• Identify endpoint defects and coordinate resolution with technical teams
• Support technical cutover and provide hands-on engineering support during migration and early-life support
• Develop and maintain endpoint configuration, validation and reporting processes
• Use Power Shell and Microsoft Graph to automate engineering, configuration, validation and reporting tasks
• Improve automation and reduce manual effort across endpoint migration
• Produce configuration records, engineering runbooks, build documentation and operational procedures
• Create and maintain technical test plans, test evidence and implementation records
• Support knowledge transfer and handover to operational and support teams
• Work with service transition teams to ensure endpoint services are supportable and operationally ready
• Contribute to lessons learned and continuous improvement across endpoint migration waves
• Collaborate with identity, security, network, application, service transition and programme teams

• Experienced EUC or Endpoint Engineer
• Strong practical experience with Microsoft Intune, Entra  and Windows Autopilot
• Extensive Windows endpoint administration and troubleshooting experience
• Experience designing and implementing Intune configuration, compliance, security, update and application-deployment policies
• Proven experience provisioning and migrating Windows devices at scale
• Experience delivering endpoint migrations across multiple user and device cohorts
• Strong understanding of Windows profiles, user state, application deployment and device provisioning
• Strong application-packaging and deployment experience
• Experience with Power Shell and Microsoft Graph for automation and administration
• Good knowledge of Microsoft Defender for Endpoint and endpoint security controls
• Strong understanding of Bit Locker, certificates, VPN and Conditional Access dependencies
• Experience troubleshooting device enrolment, compliance, policy, authentication, application and connectivity issues
• Ability to analyse logs and diagnostic information to identify complex technical problems and determine root cause
• Experience supporting technical pilots, migration waves, cutovers and early-life support
• Strong understanding of endpoint security and modern management principles
• Experience working with identity, infrastructure, network and application teams
• Strong testing skills, including producing test plans, evidence and defect records
• Good documentation skills, including configuration records, engineering runbooks and operational procedures
• Strong customer-support and communication skills
• No educational credential explicitly required

Demonstrates expertise in configuring and managing Microsoft Intune, Windows Autopilot, and Entra  for effective endpoint management and migration. Proficient in automating processes using Power Shell and Microsoft Graph while ensuring compliance and security across Windows devices.

• Microsoft Intune Management
• Windows Autopilot Provisioning
• Endpoint Security Controls
• Power Shell Automation
• Application Packaging and Deployment

• Microsoft Intune
• Windows Autopilot
• Entra
• Endpoint Administration
• Application Deployment
• Power Shell
• Microsoft Graph
• Bit Locker
• VPN Configuration
• Conditional Access

• Customer Support
• Communication
• Collaboration
• Problem Solving
• Documentation

• Endpoint Engineering
• Device Migration
• User State Management
• Compliance…