Endpoint Platform Engineer: Intune, Windows & Zero Trust

Fitch Ratings, Inc.; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Fitch Group, headquartered in London, is seeking an Endpoint Engineer to join its global infrastructure team. The role focuses on advanced endpoint management, policy modernization, and secure, reliable user experiences across Windows environments using Intune, MECM, and CSP-based policies.

You’ll drive automation, observability, and Zero Trust practices, working on provisioning, hardware lifecycle, and developer tooling integration.

Qualifications

• 3–5+ years in enterprise endpoint engineering or advanced support.
• Experience with Windows 11, Azure AD/Entra ID, Intune, MECM, and co-management services.
• Strong knowledge of Active Directory, Group Policy, and RSAT tooling.
• Familiarity with device management, Zero Trust, and secure baseline configurations.

Responsibilities

• Own migration of policies from legacy Group Policy to CSP-based Intune policies.
• Design and maintain CSP policy structures across the fleet.
• Manage hardware fleet lifecycle and driver updates (HP/Dell).
• Troubleshoot audio, video, and conferencing reliability issues.
• Modernize Autopilot and provisioning workflows.
• Package, test, and deploy applications via MECM/Intune.
• Define endpoint requirements for AI/ML workloads and developer tools.
• Participate in on-call rotations and incident resolution.
• Create and maintain runbooks and cross-team documentation.

Skills

Windows 11

Azure AD

Intune

MECM

Group Policy

RSAT tools

LAPS

Privilege mgmt

M365 Apps

Networking

Tools

Intune (Endpoint Manager)

Job description

Fitch Group, headquartered in London, is seeking an Endpoint Engineer to join its global infrastructure team. The role focuses on advanced endpoint management, policy modernization, and secure, reliable user experiences across Windows environments using Intune, MECM, and CSP-based policies.

You’ll drive automation, observability, and Zero Trust practices, working on provisioning, hardware lifecycle, and developer tooling integration.