Endpoint Management Engineer: Intune & Modern Desktop (Flexible Hours)

Serco Group Plc; Metropolitan Borough of Solihull; Presencial; GBP 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

25 days annual leave

Flexible working options

Pension scheme

Resumo da oferta

Serco Group Plc is seeking an experienced Product Support Technical Engineer to specialise in supporting and optimising the Managed Desktop Service estate. You will manage Windows 11, macOS and ChromeOS devices using Microsoft Intune and Autopilot to deliver secure provisioning, configuration, and application deployment.

The role emphasizes problem solving, root-cause analysis, and robust long-term solutions while maintaining high security, compliance, and operational integrity across the estate.

Qualificações

• Proven experience managing enterprise Windows 11, macOS and ChromeOS devices within a modern endpoint management environment.
• Strong expertise in Microsoft Intune, including policy creation, application deployment, compliance management, reporting, endpoint security, and device lifecycle management.
• Experience supporting Windows Autopilot and modern endpoint deployment technologies.
• Hands-on experience with Windows 11 device provisioning, OS management, application packaging, and profile management.
• Experience supporting macOS and ChromeOS devices within an enterprise environment.
• Strong understanding of Microsoft 365 security technologies, Conditional Access, identity protection, compliance policies, and endpoint security controls.
• Experience implementing and maintaining Microsoft Defender security controls and vulnerability remediation activities.
• Scripting and automation skills, with PowerShell being essential.
• Understanding of networking fundamentals, Group Policy, Active Directory, and Microsoft Entra ID.
• Experience with Mobile Device Management (MDM), Mobile Application Management (MAM), compliance policies, and endpoint security frameworks.

Responsabilidades

• Manage and support Windows 11, macOS and ChromeOS endpoints using Microsoft Intune as the primary management platform, ensuring secure deployment, configuration, application delivery, policy enforcement, and lifecycle management.
• Create, maintain and optimise Microsoft Intune policies, configuration profiles, compliance policies, application deployments, security baselines, update rings, and endpoint management processes.
• Ensure devices remain compliant with organisational security standards, conditional access requirements, and industry best practices.
• Provide 3rd-line technical support, diagnosing and resolving complex issues across Windows 11, macOS and ChromeOS devices using a structured and methodical troubleshooting approach.
• Investigate and remediate endpoint security, compliance, configuration, and application-related issues, ensuring devices remain secure and operational.
• Support device provisioning and enrolment processes, including Windows Autopilot and other modern deployment technologies.
• Perform root cause analysis on recurring incidents and work closely with Problem Management to implement permanent solutions that improve service stability.
• Document technical processes, standards, configurations, and support procedures while providing technical guidance to colleagues and end users.
• Support the evaluation, testing, and implementation of new technologies, platform enhancements, and service improvements.
• Implement and maintain endpoint security controls including Microsoft Defender, BitLocker, vulnerability management, and security remediation activities.
• Collaborate with internal stakeholders to continuously improve the end-user experience whilst maintaining operational integrity, security, and compliance.
• Deliver MDS Standard Service support, including installation, configuration, troubleshooting, and user guidance.
• Act as a technical consultant and provide subject matter expertise across endpoint management, deployment, security, and end-user computing services.

Conhecimentos

Microsoft Intune

PowerShell

Active Directory

Microsoft Entra ID

MDM/MAM

Microsoft Defender

Formação académica

Bachelor's degree in Computer Science or related field

Microsoft Endpoint Administrator MD-102

ITIL Foundation

CompTIA A+/N+

Ferramentas

Windows Autopilot

Intune policies & configurations

Descrição da oferta de emprego

Serco Group Plc is seeking an experienced Product Support Technical Engineer to specialise in supporting and optimising the Managed Desktop Service estate. You will manage Windows 11, macOS and ChromeOS devices using Microsoft Intune and Autopilot to deliver secure provisioning, configuration, and application deployment.

The role emphasizes problem solving, root-cause analysis, and robust long-term solutions while maintaining high security, compliance, and operational integrity across the estate.