Senior Endpoint Experience Engineer

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

Abou The Role

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

Work Experience/Background

Essential

• Ability to work in a challenging and dynamic environment
• Experience of providing production and development support for business critical applications and servers
• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
• 5+ Years of experience specialising in Microsoft Azure technologies
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.

Desirable

• Experience of working in a financial background is preferred.

Technical Skills

Essential

• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
• Microsoft SCCM / MECM, Jamf
• Patch My PC
• PowerShell scripting in enterprise production environments
• Microsoft Intune / Endpoint Management
• Intune update rings
• Windows 10 & 11 desktops - performance troubleshooting and optimization.
• General networking experience

Desirable

• Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)
• Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)
• A good understanding of the Azure technologies

Competencies

• Self-motivated individual that can work under their own initiative with minimal supervision
• Able to deal effectively with external suppliers and providers.
• Able to communicate effectively with end users, management, and other teams
• Take ownership of issues and follow through with them until resolution
• Excellent written and verbal communication
• Teamwork and interpersonal skills
• A willingness to learn and keep up to date with technologies

#J-18808-Ljbffr