Endpoint Engineer

We'll inspire and empower you to deliver your best work so you can evolve, grow and succeed - today and into tomorrow. With more than 55,000 people in 40+ countries, working with us offers an exciting range of opportunities to develop your career within a supportive and diverse team who always strive to do the right thing for our people, clients and communities.

People are our greatest asset, and we offer a competitive package to retain and attract the best talent.

In addition to the benefits you'd expect, UK employees also receive free single medical cover and digital GP service, family-friendly benefits such as enhanced parental leave pay and free membership of employee assistance and parental programmes, plus reimbursement towards relevant professional development and memberships. We also give back to our communities through our Collectively program which incorporates matched-funding, paid volunteering time and charitable donations.

Work-life balance and flexibility is a key focus area for us. We're happy to discuss hybrid, part-time and flexible working hours, patterns and locations to suit you and our business.

About the opportunity:

Serve as a member of the Modern Workspace Management team, bringing broad skills across the end-user facing estate, with specialist skills in endpoint management, corporate endpoint imaging (O/S) and application packaging, deployment and licensing; this includes, but is not limited to SCCM and Intune, bringing proactive maintenance and continuous improvement of the endpoint estate, along with reacting to incidents & changes and continuously bolstering our cyber security posture.

Role scope includes administration, planning, management information, security hardening, setup, deployment and maintenance of all endpoint platform technologies and associated EUC. Provides input to projects and collaborates with other teams across the local and global IT estate, as well as internal end users and external partners.

Key Responsibilities

• Implementation, administration, configuration and maintenance of all end-point platforms.
• Maintaining the endpoint inventory and relevant CMDB entries
• Produces regular management reports and telemetry outlining the health of the endpoint estate, including early-warning signs (prevention of incidents),
• Package, tests and apply patches and security updates for all supported Operating Systems
• Experience with desktop deployment automation architecture, design/migration, SCCM/Intune hierarchy and design troubleshooting
• Creating, testing and deployment of an OS image, including use of MS Autopilot
• Packaging, deployment, configuration of all approved software
• Software asset management: licence compliance and harvesting
• Blocking of end user software, as and when required
• Support for Cyber Security colleagues, embracing the DevSecOps culture
• Provide technical expertise, guidance, and strategic recommendations to other IT groups
• Develop, implement, and promote standard operating procedures and schedules
• Conduct hardware and software audits to ensure compliance with established standards, policies, and configuration guidelines
• Occasional, general IT support / trouble shooting (L2; low frequency)
• Perform other reasonable duties as assigned

Essential Skills and Attributes

Knowledge and skills may vary by system assignment. See Other Qualifications section on job posting for position specific requirements.

• Working knowledge of enterprise IT estates / environments
• Proactive, resilient and highly engaging
• Demonstrated understanding of software and hardware configuration management.
• Familiar with principles and best practices related to Active Directory (and Entra), Group Policy, and Intune Policy Management.
• Proficient in completing daily assignments and project activities with great attention to detail and a high degree of accuracy.
• Excellent analytical and critical thinking skills, good judgment, and an ability to act decisively.
• Ability to work without direct supervision to independently stay on task.
• Ability to suggest system improvements and optimize existing infrastructure.

Strong knowledge with the following :

• Azure Hybrid environments
• Latest version of SCCM CB
• Office 365 application usage
• Intune experience
• Current version of Windows OS in the areas of deployments, image creation, distribution, Windows 10 and 11 desktop feature upgrades (MDT, OSD, Office suite migrations)
• Application packaging & scripting (InstallShield and/or PatchMyPC experience preferred)
• Desktop patching
• Group policy management (GPOs)
• Intune Policy management
• Strong knowledge of PowerShell scripting (preferred)
• General L2 IT skillset (i.e. good breadth)

Education/ Experience

• Bachelor's Degree or significant, demonstrable experience
• Relevant technical experience performing mid-level systems administration activities
• Relevant technical experience with SCCM and Intune.

Our Culture

Our values stand on a foundation of safety, integrity, inclusion and diversity. We put people at the heart of our business and we truly believe that by supporting one another through our culture of caring, we all succeed. We value positive mental health and a sense of belonging for all employees. Find out more

We aim to embed inclusion and diversity in everything we do. We know that if we are inclusive, we're more connected, and if we are diverse, we're more creative. We accept people for who they are, regardless of age, disability, gender identity, gender expression, marital status, mental health, race, faith or belief, sexual orientation, socioeconomic background, and whether you're pregnant or on family leave. This is reflected in our wide range of Global Employee Networks centred on inclusion and diversity - ACE, Careers, Enlace, Harambee, OneWorld, Prism, Vetnet, and Women's - find out more about our employee networks here.

We partner with VERCIDA to help us attract and retain diverse talent. For greater online accessibility please visit to view and access our roles. As a Disability Confident employer, we will interview all disabled applicants who meet the minimum criteria for a vacancy. We welcome applications from candidates who are seeking flexible working and from those who may not meet all the listed requirements for a role

If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team.