Modern Desktop Engineer

The Modern Desktop Engineer is a hands-on technical role responsible for supporting, securing and continuously improving Shop2

Shop’s endpoint environment across Windows, macOS and supported mobile platforms.

You will focus on device provisioning, configuration, compliance, application delivery, operating system management and endpoint security using platforms such as Microsoft Intune and Apple Business Manager. You will help provide users with a consistent and secure device experience while improving automation, supportability and lifecycle management across the endpoint estate.

• You believe a well-built device is invisible to the user, and you take pride in making that true at scale
• You're comfortably OS-agnostic; you respect both Windows and macOS and enjoy the quirks of each
• You'd rather fix the root cause once than reset the same device ten times; good baselines and automation are your default
• You troubleshoot methodically: reproduce, check the logs, isolate, fix, document
• You keep a fleet in order without losing the plot; patch cycles, compliance and inventory don't slip on your watch
• You have empathy for the person behind the ticket and can explain a policy without sounding like one
• You like enabling first-line teams so common issues never reach you twice

• Provision and configure Windows and macOS devices using automated deployment methods.
• Manage Windows Autopilot, Apple Business Manager and zero-touch provisioning processes.
• Maintain standard device builds, configuration profiles and provisioning documentation.
• Coordinate device replacement, decommissioning, secure wiping and disposal.

• Configure and maintain device policies through Microsoft Intune and related management platforms.
• Implement security baselines aligned with organisational and CIS requirements.
• Monitor device compliance and address configuration or enrolment failures.
• Maintain device compliance signals that feed Conditional Access, working with the Microsoft 365 & Identity Engineer.
• Manage encryption controls, including Bit Locker and File Vault.

• Package, test and deploy business applications to managed endpoints.
• Manage operating system upgrades, security updates and feature releases.
• Coordinate third-party software patching and application lifecycle activities.
• Monitor deployment results and resolve update or installation failures.
• Configure and maintain endpoint controls within the Microsoft Defender stack.
• Manage local administrative access and endpoint privilege controls, including LAPS.
• Work with the Security Operations Analyst to remediate endpoint vulnerabilities.
• Support containment and remediation activities during endpoint security incidents.

• Provide second-line support for endpoint, operating system and application issues.
• Investigate recurring device problems and implement permanent corrective actions.
• Coordinate warranty repairs, vendor support and hardware escalations.
• Develop support documentation and enable first-line support teams to resolve common issues.

• Maintain accurate hardware and software inventory records.
• Support asset lifecycle processes from procurement through deployment and disposal.
• Monitor endpoint health, configuration status and software compliance.
• Identify opportunities to improve device reliability, user experience and deployment automation.

• Strong knowledge of Windows endpoint administration, with practical exposure to macOS management.
• Experience with Microsoft Intune, Windows Autopilot and modern device-management practices.
• Understanding of endpoint security, compliance policies, encryption and security baselines.
• Experience packaging and deploying applications, operating-system updates and third-party patches.
• Strong troubleshooting skills across devices, operating systems, applications and user configurations.
• An automation-focused approach to device provisioning, configuration and lifecycle management.
• Good knowledge of hardware asset management, device…