End User Computing Team Lead

Intermediate Capital Group; Greater London; On-site; GBP 75,000 - 100,000; Full time

Job summary

Intermediate Capital Group in London is seeking a Principal, End User Computing Team Lead for a 6-month fixed-term contract. You will lead the EUC function across endpoint services, Microsoft Intune, Autopilot, and Microsoft 365, ensuring secure, reliable access to workplace tools while driving automation and service improvements.

The role balances operational leadership with project delivery, supplier management and governance, reporting to the Head of Infrastructure & Architecture within

Qualifications

• Strong hands-on experience with Microsoft Intune and modern endpoint management.
• Extensive Windows 11 administration, configuration, deployment and troubleshooting.
• Experience designing and supporting Windows Autopilot/Autopilot Device Preparation.
• Experience supporting Microsoft 365 workplace services in an enterprise.
• Experience delivering software deployment, application lifecycle management and patching.
• Good understanding of endpoint security, conditional access and encryption controls.
• Experience leading technical teams and managed service providers.
• Excellent communication and stakeholder engagement skills.

Responsibilities

• Provide day-to-day leadership and direction to EUC engineers and service providers.
• Prioritise workloads and ensure tickets, service requests and projects meet SLAs.
• Act as escalation point for complex endpoint and workplace technology issues.
• Promote knowledge sharing and close collaboration across teams.
• Drive ownership, automation and continual service improvement.
• Own lifecycle management of Windows laptops, desktops, and mobile devices.
• Lead Intune administration including configuration profiles and policies.
• Maintain Windows Autopilot and device preparation processes.
• Oversee hardware refresh, disposal and asset data accuracy.
• Ensure endpoint estate is standardised and compliant with policy and security.
• Own software packaging, testing, deployment, and patching across the estate.
• Work with Cyber Security to remediate vulnerabilities and ensure compliance.
• Develop repeatable deployment processes with reporting and rollback.
• Support Microsoft 365 workplace services (Outlook, Teams, OneDrive, SharePoint) and Copilot.
• Collaborate with stakeholders to improve productivity and user experience.
• Provide technical input into roadmaps and governance for workplace technology.

Job description

Job Title: Principal, End User Computing Team Lead

Contract Type: 6-month fixed-term contract

Location: London, St Pauls

Department: Corporate Technology

Reporting to: Head of Infrastructure & Architecture

What the Hiring Manager says….

Summary of our opportunity

The End User Computing Team Lead is responsible for the operational delivery, support, security and continual improvement of end-user technology across the organisation. The role leads endpoint services spanning Windows laptops and desktops, mobile devices, Windows 365 Cloud PCs, Microsoft Intune, Windows Autopilot, Microsoft 365 applications, software deployment, endpoint security controls and user experience monitoring.

You will act as the technical lead and escalation point for workplace technology, ensuring employees can securely, reliably and efficiently access the tools required to perform their roles. The role balances operational leadership with project delivery, supplier management, technical governance and service improvement.

Primary responsibilities for this role include (but are not limited to):

Leadership and team management

• Provide day-to-day leadership, direction and guidance to EUC engineers and service providers.
• Prioritise workloads and ensure operational tickets, service requests and project activities are delivered within agreed service levels.
• Act as the escalation point for complex endpoint and workplace technology issues.
• Promote knowledge sharing, effective documentation and close collaboration across internal and outsourced teams.
• Drive a culture of ownership, automation and continual service improvement.

Endpoint management and lifecycle

• Own the lifecycle management of Windows laptops, desktops, mobile devices and Windows 365 Cloud PCs.
• Lead the administration and continual improvement of Microsoft Intune, including configuration profiles, compliance policies, security baselines and application assignments.
• Maintain and enhance Windows Autopilot and Autopilot Device Preparation processes, secure standard builds and device handover procedures.
• Oversee hardware refresh, replacement and disposal programmes, maintaining accurate asset and configuration data.
• Ensure the endpoint estate remains standardised, supportable and aligned with business, security and regulatory requirements.

Software deployment, patching and vulnerability remediation

• Own software packaging, testing, deployment, upgrade and removal processes across the endpoint estate.
• Ensure operating systems, Microsoft 365 Apps and third-party applications remain patched and compliant within agreed targets.
• Oversee endpoint management and automation platforms used for application deployment, patching, inventory and remediation.
• Work with Cyber Security and infrastructure teams to remediate vulnerabilities identified through scanning, monitoring and threat intelligence.
• Develop repeatable, controlled deployment processes with clear reporting, rollback and exception management.

Microsoft 365 workplace services

• Support and improve Microsoft 365 workplace applications and services, including Outlook, Teams, OneDrive, SharePoint, Microsoft 365 Apps and Microsoft 365 Copilot.
• Partner with business stakeholders to improve productivity, adoption and user experience.
• Support responsible AI enablement and the operational adoption of Copilot and related workplace capabilities.
• Contribute to service roadmaps, standards and technical decisions affecting the modern workplace.

Endpoint security and compliance

• Implement and maintain endpoint security controls in partnership with Cyber Security.
• Support Conditional Access, multifactor authentication, application control, endpoint protection, encryption and device compliance initiatives.
• Monitor endpoint compliance and investigate data quality, duplication and coverage gaps across management and security platforms.
• Ensure operational processes support internal policy, audit and regulatory requirements.
• Provide clear evidence, reporting and remediation plans for endpoint risks and control exceptions.

Digital employee experience and service improvement

• Monitor and improve digital employee experience using endpoint telemetry, performance data, incident trends and user feedback.
• Identify recurring issues and lead proactive remediation to improve device performance, reliability and employee satisfaction.
• Identify opportunities for automation, self-service and reduced manual support effort.
• Define meaningful service measures and provide management updates on performance, risk and improvement activity.

Supplier, stakeholder and project delivery

• Manage relationships with technology vendors, deployment partners and service providers, ensuring they meet operational and security expectations.
• Participate in product evaluations, proofs of concept, commercial reviews and technology selection exercises.
• Provide technical input into strategic planning, architecture decisions and workplace technology roadmaps.
• Produce and maintain technical documentation, operating procedures, project updates and management reports.

Key Requirements/ Qualifications

You will have demonstrable experience of:

Essential

• Strong hands-on experience administering Microsoft Intune and modern endpoint management services.
• Strong knowledge of Windows 11 administration, configuration, deployment and troubleshooting.
• Experience designing, maintaining and supporting Windows Autopilot or Autopilot Device Preparation services.
• Experience supporting Microsoft 365 workplace services in an enterprise environment.
• Experience delivering software deployment, application lifecycle management and patching solutions.
• Good understanding of endpoint security, compliance, Conditional Access, encryption and endpoint protection controls.
• Experience leading technical teams, managed service providers or delivery partners.
• Ability to analyse complex technical issues and translate findings into clear decisions and remediation plans.
• Excellent written and verbal communication, with the ability to engage and influence technical and non-technical stakeholders.
• An organised and delivery-focused approach, with the ability to balance operational priorities and project commitments.

Desirable

• Experience with Windows 365 Cloud PCs and mobile device management for iOS and Android.
• Experience with digital employee experience, endpoint analytics or user experience monitoring platforms such as Nexthink.
• Experience with application control technologies such as ThreatLocker.
• PowerShell scripting and automation experience.
• Working knowledge of Microsoft Entra ID, Microsoft Defender and Microsoft Purview capabilities relevant to endpoint services.
• Experience supporting Microsoft 365 Copilot or enterprise AI adoption.
• ITIL and/or relevant Microsoft certifications.
• Experience working within financial services or another regulated environment.

Key deliverables during the 6-month contract

• Maintain endpoint compliance, security and service continuity across the managed estate.
• Ensure successful delivery of operating system, application and security patching activity.
• Maintain and enhance Microsoft Intune, Windows Autopilot and Autopilot Device Preparation services.
• Support laptop lifecycle, deployment and refresh programmes across global offices.
• Improve endpoint performance, reliability and digital employee experience through proactive monitoring and remediation.
• Support ongoing Microsoft 365 Copilot and workplace AI initiatives.
• Keep operational processes, technical standards and support documentation current and usable.
• Provide clear leadership, prioritisation and technical direction to the EUC function and its delivery partners.

Personal Attributes

Personal attributes that will make you successful in this role include but are not limited to:

• A confident and supportive leader who creates clarity, accountability and trust.
• A pragmatic, hands-on technologist who is comfortable moving between strategy, projects and operational detail.
• A collaborative communicator who builds strong relationships across technology, security, business teams and suppliers.
• Analytical, curious and evidence-led, with a strong focus on root-cause resolution.
• Resourceful and self-sufficient, with a continuous improvement mindset.
• Calm under pressure, well organised and able to manage competing priorities.

Our Global Benefits Framework is centred around these 3 key attributes:

• Wellbeing - Supporting your mental, physical and financial wellbeing as well as your lifestyle needs.
• Inclusivity – Fit for purpose and competitive, no matter who or where you are.
• Longevity – Long Term and sustainable in design