Senior Endpoint Management Engineer; Temporary

Vir Biotechnology, Inc. is a clinical-stage biopharmaceutical company focused on powering the immune system to transform lives by discovering and developing medicines for serious infectious diseases and cancer. Its clinical-stage portfolio includes programs for chronic hepatitis delta and multiple PRO-XTEN® dual-masked T-cell engagers across validated targets in solid tumor indications. Vir Biotechnology also has a preclinical portfolio of programs across a range of infectious diseases and oncologic malignancies.

Vir Biotechnology has exclusive rights to the universal PRO-XTEN®masking platform for oncology and infectious disease. PRO-XTEN®is a trademark of Amunix Pharmaceuticals, Inc., a Sanofi company.

We believe the success of our colleagues drives the success of our mission. We are committed to creating a company where everyone feels supported and encouraged to give their best.

We need a senior, hands-on endpoint management expert who can take ownership of our modern endpoint environment immediately. This role will lead the day-to-day administration and ongoing improvement of Microsoft Intune, Windows Autopilot, Automox, Microsoft 365, Entra , patch compliance, endpoint security, automation, and device lifecycle management.

This is not a basic desktop support role. We are looking for someone who can troubleshoot complex endpoint issues, clean up inconsistent configurations, improve patch and compliance reporting, automate repetitive work, and build durable processes that reduce support burden and improve the user experience.

• Microsoft Intune administration, including configuration profiles, compliance policies, app deployments, enrollment, reporting, and troubleshooting.
• Windows Autopilot provisioning, device enrollment, endpoint standards, rebuilds, refreshes, and lifecycle processes.
• Automox patch management, including patch policy design, compliance tracking, failed patch remediation, Worklets, reporting, and exception handling.
• Endpoint security controls, including security baselines, Vir security tools, Conditional Access dependencies, local admin controls, and secure configuration standards.
• Microsoft 365 and Entra  tied to endpoint operations, including device identity, groups, licensing, access, and user/device lifecycle administration.
• Power Shell and Microsoft Graph automation to reduce manual effort, improve visibility, and fix recurring endpoint issues at scale.
• Operational documentation, runbooks, support guides, reporting, and repeatable processes for IT Operations and Service Desk teams.
• Own Microsoft Intune as the primary endpoint management platform for Windows and macOS endpoints.
• Design, implement, troubleshoot, and continuously improve device enrollment, Windows Autopilot, configuration profiles, compliance policies, security baselines, application deployments, update rings, device restrictions, and endpoint lifecycle workflows.
• Serve as the escalation point for complex Intune, Autopilot, enrollment, policy, application deployment, compliance, and device configuration issues.
• Develop a clean, scalable endpoint architecture that minimizes drift, reduces one-off exceptions, and supports consistent configuration across the fleet.
• Create and maintain device standards for provisioning, rebuilds, refreshes, remote support, decommissioning, and secure disposal.
• Use reporting, dashboards, and operational review cycles to identify compliance gaps, failed deployments, device health issues, and recurring endpoint problems.
• Translate business needs into endpoint management policies that are secure, supportable, and user‑conscious.

• 5+ years of experience in endpoint management, modern workplace engineering, systems administration, infrastructure operations, or a related role.
• Strong hands‑on experience with Microsoft Intune and Windows endpoint management.
• Experience with Windows Autopilot, device enrollment, application deployment, compliance policies, and endpoint troubleshooting.
• Experience with Automox or another enterprise patch management platform.
• Working knowledge of Microsoft 365, Entra , endpoint security, device identity, access…