Endpoint Engineer

Fitch Ratings, Inc.; England; On-site; GBP 60,000 - 90,000; Full time

Job summary

Fitch Group, headquartered in London, is seeking an Endpoint Engineer to join its global infrastructure team. The role focuses on advanced endpoint management, policy modernization, and secure, reliable user experiences across Windows environments using Intune, MECM, and CSP-based policies.

You’ll drive automation, observability, and Zero Trust practices, working on provisioning, hardware lifecycle, and developer tooling integration.

Qualifications

• 3–5+ years in enterprise endpoint engineering or advanced support.
• Experience with Windows 11, Azure AD/Entra ID, Intune, MECM, and co-management services.
• Strong knowledge of Active Directory, Group Policy, and RSAT tooling.
• Familiarity with device management, Zero Trust, and secure baseline configurations.

Responsibilities

• Own migration of policies from legacy Group Policy to CSP-based Intune policies.
• Design and maintain CSP policy structures across the fleet.
• Manage hardware fleet lifecycle and driver updates (HP/Dell).
• Troubleshoot audio, video, and conferencing reliability issues.
• Modernize Autopilot and provisioning workflows.
• Package, test, and deploy applications via MECM/Intune.
• Define endpoint requirements for AI/ML workloads and developer tools.
• Participate in on-call rotations and incident resolution.
• Create and maintain runbooks and cross-team documentation.

Skills

Windows 11

Azure AD

Intune

MECM

Group Policy

RSAT tools

LAPS

Privilege mgmt

M365 Apps

Networking

Tools

Intune (Endpoint Manager)

Job description

Fitch Group is currently seeking a Endpoint Engineer based out of our London office.

As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst.

Fitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference.

Want to learn more about a career in technology and data at Fitch? Visit:

About the role:

The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles.

How You’ll Make an Impact:

Endpoint Platform Engineering (Windows CSP / Intune)

• Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture.
• Design and maintain consolidated, well-governed CSP policy structures across the fleet.

Hardware Fleet & Device Lifecycle

• Drive vendor-led firmware and driver lifecycle management — including HP Image Assist and Dell Command Update automations — to improve device stability and end-user experience.
• Troubleshoot and remediate audio, video, and conferencing reliability issues.
• Perform hardware and performance testing/benchmarking to support fleet standardization decisions.

Autopilot & Provisioning Modernization

• Modernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency.
• Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline.
• Complete remaining GPO-to-CSP transitions in support of provisioning consistency.

Application & Configuration Management

• Package, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements.
• Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives.

Developer Tooling & AI Workload Enablement

• Configure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards.
• Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing.
• Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (, Claude Code, Copilot) within governance and device-management guardrails.

Operations & Support

• Deliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination.
• Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.
• Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement.
• Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations.

Documentation & Cross-Functional Collaboration

• Create and maintain technical documentation, runbooks, and cross-team knowledge resources.
• Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management.
• Act as an owner by proactively driving issues to resolution across business

You May be a Good Fit if:

3–5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in:

• Windows 11, Azure AD / Entra ID
• Microsoft Intune (Endpoint Manager), MECM, and co-management services
• Active Directory and Directory Services, including Group Policy and RSAT tools
• Intune configuration and compliance policy management
• LAPS and least-privilege / privilege elevation models (, Privilege Management)
• Microsoft 365 Apps deployment, configuration, and update servicing
• Networking fundamentals (DNS, DHCP, VPN, Proxy)

Strong experience with modern Intune management, including: