Sr Engineer

Role summary

We are looking for a Windows Endpoint Platform Engineer with hands-on experience managing enterprise Windows devices at scale. This role is ideal for someone who has solid experience in Windows platform engineering, endpoint lifecycle management, and Microsoft Intune, and who is ready to take ownership of operational work, deployments, automation, and platform improvements.

You will help manage the Windows endpoint ecosystem, including device onboarding, compliance, configuration, application deployment, policy enforcement, and troubleshooting across the fleet. The ideal candidate is strong in Microsoft Intune, understands modern device management deeply, and can work effectively with security, infrastructure, service desk, and application teams.

What you will do

• Manage and support Windows endpoint management solutions, primarily Microsoft Intune.
• Configure and maintain device compliance, configuration profiles, Windows Update policies, and endpoint security settings.
• Deploy and manage applications, scripts, and device configuration baselines using Intune.
• Troubleshoot Windows device issues related to enrollment, policy application, application delivery, authentication, and device compliance.
• Support Windows lifecycle operations such as provisioning, refresh, upgrade readiness, and retirement.
• Partner with security teams to implement controls for BitLocker, Defender, firewall, local admin restrictions, and Conditional Access.
• Monitor endpoint health and recommend improvements to reliability, manageability, and user experience.
• Document standard operating procedures, configuration changes, and support runbooks.
• Participate in incident response and root cause analysis for endpoint-related issues.
• Work closely with cross-functional teams to deliver endpoint changes with minimal disruption.
• Contribute to automation and validation efforts for endpoint configuration and platform changes.

What we are looking for

• 4 to 7 years of experience in Windows endpoint engineering, desktop support engineering, or endpoint administration.
• Strong working knowledge of the Windows operating system, enterprise device management, and modern management concepts.
• Hands-on experience with Microsoft Intune in a production environment.
• Experience with device enrollment, compliance policies, configuration profiles, app deployment, and update management in Intune.
• Familiarity with Windows Autopilot, PowerShell, and Microsoft Entra ID / Conditional Access.
• Good understanding of endpoint security features such as BitLocker, Defender for Endpoint, and local privilege control.
• Strong troubleshooting skills with the ability to diagnose and resolve endpoint issues independently.
• Ability to write and maintain PowerShell scripts for automation or remediation.
• Experience with test automation or validation automation for endpoint workflows.
• Strong communication skills and a collaborative mindset.

Preferred qualifications

• Experience integrating Intune with Microsoft Endpoint Manager components and broader Microsoft 365 security tools.
• Familiarity with co-management, MECM/SCCM, or migration from legacy management platforms to Intune.
• Experience with device certificates, SCEP/PKCS, and Wi-Fi/VPN profile deployment.
• Knowledge of enterprise software packaging and deployment at scale.
• Development experience in Go or Java Spring Boot.
• Familiarity with test automation frameworks, endpoint validation tooling, or automated regression testing.