Windows Client Engineer

Avacone; Basel; Vor Ort; CHF 90.000 - 120.000; Vollzeit

Zusammenfassung

Avacone in Basel, Switzerland, seeks a Windows Client Engineer to manage, secure, and improve our Windows endpoint environment. You will collaborate with infrastructure, security, and service desk teams to deliver a reliable digital workplace.

The role covers endpoint management, automation, and workplace modernization, with responsibilities spanning OS deployment, patching, Intune/Configuration Manager, and policy enforcement. Fluency in English required.

Qualifikationen

• Experience in enterprise Windows client administration.
• Experience with Intune or Configuration Manager.
• Understanding of deployment, patch management, and device lifecycle management.
• Familiarity with Active Directory, Microsoft Entra ID, and Group Policy.
• Experience with PowerShell scripting and automation.
• Understanding of endpoint security, encryption, access controls, and device compliance.
• Familiarity with networking fundamentals (DNS, DHCP, VPN, TCP/IP).
• Structured troubleshooting and a service‑oriented mindset.
• Ability to document clearly across teams.

Aufgaben

• Configure, deploy, maintain, and optimise Windows client OS and endpoint configurations.
• Manage devices using Microsoft Intune, Configuration Manager, and related tools.
• Support automated device provisioning and lifecycle management, including Windows Autopilot.
• Package, test, deploy, and update business applications.
• Manage OS updates, security patches, and feature upgrades.
• Implement and maintain endpoint security policies with the security team.
• Administer device policies via Intune and Group Policy.
• Troubleshoot client performance, apps, authentication, and connectivity.
• Automate recurring admin tasks with PowerShell.
• Support integration with Entra ID, AD, and Microsoft 365 services.
• Maintain technical documentation, configurations, and SOPs.
• Collaborate with service desk and app owners to resolve escalations.

Kenntnisse

Windows client administration

Intune

Configuration Manager

PowerShell scripting

Active Directory

Microsoft Entra ID

Group Policy

Endpoint security

Networking basics

Tools

Intune

Configuration Manager

Jobbeschreibung

About the Role

We are looking for a Windows Client Engineer to help manage, secure, and continuously improve our Windows endpoint environment. You will collaborate with infrastructure, security, and service desk teams to deliver a reliable and efficient digital workplace.

The scope of responsibilities will be aligned with your experience and strengths, with opportunities to contribute across endpoint management, automation, and workplace modernisation.

Key Responsibilities

• Configure, deploy, maintain, and optimise Windows client operating systems and endpoint configurations.


• Manage devices using Microsoft Intune, Microsoft Configuration Manager, and related endpoint management solutions.


• Support automated device provisioning and lifecycle management, including Windows Autopilot.


• Package, test, deploy, and update business applications.


• Manage operating system updates, security patches, and feature upgrades.


• Implement and maintain endpoint security policies in collaboration with the security team.


• Administer device policies through Microsoft Intune and Group Policy.


• Troubleshoot issues related to client performance, applications, authentication, and connectivity.


• Automate recurring administrative tasks using PowerShell.


• Support integration with Microsoft Entra ID, Active Directory, and Microsoft 365 services.


• Maintain technical documentation, configuration standards, and operational procedures.


• Collaborate with the service desk and application owners to resolve escalated issues and improve the user experience.

Required Skills and Experience

• Practical experience with Windows client administration or endpoint engineering in an enterprise environment.


• Working knowledge of Microsoft Intune, Microsoft Configuration Manager, or comparable endpoint management tools.


• Understanding of application deployment, patch management, and device lifecycle management.


• Familiarity with Active Directory, Microsoft Entra ID, and Group Policy.


• Experience with PowerShell scripting and automation.


• Understanding of endpoint security, encryption, access controls, and device compliance.


• Familiarity with networking fundamentals, including DNS, DHCP, VPN, and TCP/IP.


• A structured approach to troubleshooting and a service-oriented mindset.


• Ability to collaborate across technical teams and maintain clear documentation.


• Good written and spoken English.

Preferred Qualifications

• Experience with Windows Autopilot and modern endpoint management.


• Familiarity with co-management and migration from traditional to cloud-based device management.


• Experience with Microsoft Defender for Endpoint, BitLocker, and endpoint security baselines.


• Knowledge of application packaging technologies such as MSI and MSIX.


• Exposure to virtual desktop environments, including Azure Virtual Desktop or Windows 365.


• Experience supporting Microsoft 365 applications and services.


• Relevant Microsoft certifications are an advantage.