EndPoint Engineer

• 3–5+ years of experience in Endpoint Engineering, Modern Workplace, or Endpoint Management.
• Strong hands-on experience with Microsoft Intune (MDM/MAM) in enterprise environments.
• Experience with Microsoft Defender for Endpoint, including onboarding, policy management, and alert investigation.
• Strong knowledge of Microsoft Active Directory, including Group Policy, Windows LAPS, delegated administration, security hardening, DNS, and DHCP.
• Experience administering Windows Autopilot, Windows Update for Business, compliance policies, and application deployment.
• Experience with Azure Virtual Desktop and/or Windows 365.
• Knowledge of Azure Arc and Azure Stack HCI administration.
• Practical PowerShell scripting skills for endpoint management and automation.
• Experience working with ITSM platforms such as ServiceNow.
• Understanding of change management, release management, and phased deployment strategies.
• Experience creating technical documentation and operational procedures.

Nice to have:

• Experience with Microsoft Graph API automation.
• Knowledge of endpoint security best practices and Zero Trust principles.
• Experience working in large, global enterprise environments.
• Familiarity with Agile and DevOps methodologies.

Soft skills:

• Strong analytical and troubleshooting skills.
• Excellent communication and collaboration abilities.
• Ability to work independently and take ownership of technical solutions.
• Proactive mindset with a focus on continuous improvement.
• Strong attention to security, quality, and operational excellence.

• Design, implement, and maintain Microsoft Intune device management solutions.
• Manage configuration profiles, compliance policies, security baselines, update rings, and application deployments.
• Administer Windows Autopilot and device provisioning processes.
• Troubleshoot Intune policies, application deployments, device provisioning, and endpoint configuration issues.
• Improve endpoint performance, user experience, and deployment efficiency.
• Implement and maintain Windows LAPS, including password policies, auditing, and access control.
• Support Active Directory administration, including Group Policies, delegated administration, security hardening, and domain services.
• Participate in Domain Controller lifecycle activities, including deployment, maintenance, troubleshooting, and replication support.
• Configure and maintain Microsoft Defender for Endpoint policies and collaborate with Security teams on endpoint protection initiatives.
• Support Azure Arc and Azure Stack HCI environments, including onboarding, monitoring, configuration, and lifecycle management.
• Support Azure Virtual Desktop and Windows 365 environments, including image management, provisioning, monitoring, and troubleshooting.
• Create and maintain technical documentation, runbooks, knowledge base articles, and operational standards.
• Participate in endpoint compliance initiatives, audits, and continuous service improvements.
• Automate operational tasks using PowerShell and Microsoft Graph where appropriate.