Windows Client Engineer

Avacone; Basel; On-site; CHF 90,000 - 150,000; Full time

Job summary

Avacone in Basel, Switzerland seeks a Windows Client Engineer to manage and secure our Windows endpoint environment. You will collaborate with infrastructure, security and service desk teams to deliver a reliable and efficient digital workplace.

You will contribute across endpoint management, automation and workplace modernisation, implementing Intune, Configuration Manager, Autopilot and Defender for Endpoint, and you will document configurations and procedures while supporting users.

Qualifications

• Experience in Windows client administration in an enterprise environment.
• Hands-on with Intune, Configuration Manager or comparable endpoint tools.
• Understanding of deployment, patch management and device lifecycle.
• Familiarity with AD, Entra ID and Group Policy.
• PowerShell scripting and automation experience.
• Knowledge of endpoint security, encryption, access controls and device compliance.
• Networking basics (DNS, DHCP, VPN, TCP/IP).
• Strong troubleshooting and service-oriented mindset.
• Ability to collaborate across technical teams and maintain clear docs.
• Good written and spoken English.

Responsibilities

• Configure, deploy, maintain, and optimise Windows client OS and endpoints.
• Manage devices using Intune, ConfigMgr and related tools.
• Support automated provisioning and lifecycle management including Autopilot.
• Package, test, deploy, and update business applications.
• Manage OS updates, security patches, and feature upgrades.
• Implement and maintain endpoint security policies with security team.
• Administer device policies through Intune and Group Policy.
• Troubleshoot client performance, apps, authentication and connectivity.
• Automate recurring tasks with PowerShell.
• Support integration with Entra ID, AD and Microsoft 365 services.
• Maintain documentation, configuration standards and procedures.
• Collaborate with service desk and application owners to resolve escalations.

Skills

Windows admin

Intune

ConfigMgr

PowerShell

Active Directory

Entra ID

Group Policy

Patch management

Security policies

Documentation

English

Automation

Tools

Microsoft Intune

Configuration Manager

PowerShell

MSIX

Azure Virtual Desktop

BitLocker

Defender for Endpoint

Job description

About the Role

We are looking for a Windows Client Engineer to help manage, secure, and continuously improve our Windows endpoint environment. You will collaborate with infrastructure, security, and service desk teams to deliver a reliable and efficient digital workplace.

The scope of responsibilities will be aligned with your experience and strengths, with opportunities to contribute across endpoint management, automation, and workplace modernisation.

Key Responsibilities

• Configure, deploy, maintain, and optimise Windows client operating systems and endpoint configurations.
• Manage devices using Microsoft Intune, Microsoft Configuration Manager, and related endpoint management solutions.
• Support automated device provisioning and lifecycle management, including Windows Autopilot.
• Package, test, deploy, and update business applications.
• Manage operating system updates, security patches, and feature upgrades.
• Implement and maintain endpoint security policies in collaboration with the security team.
• Administer device policies through Microsoft Intune and Group Policy.
• Troubleshoot issues related to client performance, applications, authentication, and connectivity.
• Automate recurring administrative tasks using PowerShell.
• Support integration with Microsoft Entra ID, Active Directory, and Microsoft 365 services.
• Maintain technical documentation, configuration standards, and operational procedures.
• Collaborate with the service desk and application owners to resolve escalated issues and improve the user experience.

Required Skills and Experience

• Practical experience with Windows client administration or endpoint engineering in an enterprise environment.
• Working knowledge of Microsoft Intune, Microsoft Configuration Manager, or comparable endpoint management tools.
• Understanding of application deployment, patch management, and device lifecycle management.
• Familiarity with Active Directory, Microsoft Entra ID, and Group Policy.
• Experience with PowerShell scripting and automation.
• Understanding of endpoint security, encryption, access controls, and device compliance.
• Familiarity with networking fundamentals, including DNS, DHCP, VPN, and TCP/IP.
• A structured approach to troubleshooting and a service-oriented mindset.
• Ability to collaborate across technical teams and maintain clear documentation.
• Good written and spoken English.

Preferred Qualifications

• Experience with Windows Autopilot and modern endpoint management.
• Familiarity with co-management and migration from traditional to cloud-based device management.
• Experience with Microsoft Defender for Endpoint, BitLocker, and endpoint security baselines.
• Knowledge of application packaging technologies such as MSI and MSIX.
• Exposure to virtual desktop environments, including Azure Virtual Desktop or Windows 365.
• Experience supporting Microsoft 365 applications and services.
• Relevant Microsoft certifications are an advantage.