EUC Engineer (Endpoint Management and Intune)

Lane Clark & Peacock LLP.; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

Life assurance

Cycle to work scheme

Job summary

Lane Clark & Peacock LLP is hiring an EUC Engineer to advance endpoint management and Intune governance. You will focus on vulnerability mitigation, device compliance, automation, and a scalable end-user computing experience for around 1,400 colleagues.

You will work with cross-functional teams to improve security, provide technical guidance, and develop runbooks and knowledge articles. Hybrid London-based role with strong benefits.

Qualifications

• Experience deploying and patching apps via automated tools.
• Proficient in Microsoft Intune in medium/large organisations.
• Strong documentation and ability to write clear runbooks.

Responsibilities

• Engineer and automate endpoint management, focusing on Intune.
• Configure policies, profiles, compliance rules, and baselines.
• Develop automation to reduce manual effort and improve consistency.
• Support frontline teams with documentation and guidance.
• Maintain device provisioning, packaging, deployment lifecycles.

Skills

Strong communication

Documentation

Process writing

Confident communicator

Operational stability balancing

Automation & scripting mindset

Endpoint governance

Security awareness

Tools

Microsoft Intune

Patch My PC

PowerShell

Windows Autopilot

MD-102 / Endpoint Administrator

Jamf

Entra / Conditional Access

Job description

EUC Engineer (Endpoint Management and Intune)

Business area Digital Services

Location London

Job ID 324994

Location – London, with hybrid working in line with departmental requirements

Lane Clark & Peacock (LCP) is an award-winning partnership operating across pensions and benefits, investments, insurance, energy, health, sports and data analytics. We combine industry experience with technology-led innovation to deliver high-quality advice, services and digital solutions to our clients.

As endpoint security, software governance and modern workplace technologies continue to evolve, LCP is strengthening its End User Computing (EUC) engineering capability. This role will help drive improvements in endpoint governance, modern device management, application lifecycle management, automation and secure endpoint standards across the firm.

The EUC Engineer (endpoint management and Intune) is responsible for the engineering, configuration, automation, and continuous improvement of LCP’s endpoint and modern device management ecosystem.

This role will focus primarily on endpoint engineering and Microsoft Intune, with particular emphasis on vulnerability mitigation, device compliance, automation and the delivery of a scalable, resilient end user computing experience across approximately 1,400 colleagues.

What will you be doing?

Technical Expertise & Support

• Reduce recurring operational issues through engineering improvements and automation
• Provide technical guidance and enablement to other support staff and technical teams
• Act as a third-line escalation point for Microsoft Intune and endpoint management issues
• Diagnose and resolve complex technical incidents escalated by 1st and 2nd line teams
• Ensure stable performance and configuration of Windows, macOS, iOS and Android devices managed via Intune

Platform Management & Automation

• Configure and maintain Intune policies, configuration profiles, compliance rules and security baselines
• Develop and maintain automation and scripting capabilities to reduce manual effort and improve endpoint consistency and resilience
• Build, improve and support Windows Autopilot provisioning processes
• Manage application packaging, deployment and lifecycle management within Intune
• Monitor platform health, reporting outputs, configuration drift and usage trends
• Work closely with Infrastructure, Security and Service Delivery teams to enhance endpoint security and user experience
• Support and enable frontline support services through documentation, technical guidance, automation and engineering improvements
• Contribute to the organisation’s endpoint roadmap and modern workplace strategy
• Identify opportunities to automate, streamline and improve device management processes
• Produce and maintain documentation, runbooks and technical knowledge articles

Governance, Compliance and Security

• Own and improve governance for endpoint applications, including packaging standards, approved application catalogues, automated patching and lifecycle management through platforms such as Patch My PC
• Maintain secure endpoint baselines in partnership with the Infrastructure team to support compliance, vulnerability reduction and secure-by-default endpoint standards
• Support the firm’s software governance approach through controlled application deployment, patch automation and the reduction of unmanaged endpoint software
• Ensure device management practices align with organisational security standards and regulatory requirements
• Support the change control process and attend CAB meetings where required
• Maintain accurate configuration and asset data across relevant systems

What skills and experience are we looking for?

• Experience managing packaging and automated software patching solutions (e.g. Patch My PC)
• Working knowledge equivalent to Microsoft Endpoint Administrator (MD-102) certification level
• Significant experience administering Microsoft Intune in a medium or large organisation
• Strong understanding of modern device management (MDM/MAM) approaches
• Excellent knowledge of Windows 11, Entra, Conditional Access and Autopilot
• Understanding of endpoint vulnerability management and secure endpoint principles
• Advanced troubleshooting skills across Windows and mobile operating systems
• Experience using PowerShell for automation, configuration and reporting
• A clear and confident communicator, able to explain technical concepts effectively
• Strong documentation and process-writing capabilities
• Ability to balance operational stability, user experience and security requirements
• Experience reducing reliance on local administrator access through modern endpoint management methods
• Familiarity with Zero Trust and secure‑by‑default endpoint strategies
• Experience managing macOS devices via Intune or alternative platforms (e.g. Jamf)
• Understanding of security baselines, endpoint protection and the M365 security stack
• Experience working in an ITIL‑aligned environment
• Knowledge of Microsoft Defender for Endpoint and related technologies

What’s in it for you?

Take a look at our Glassdoor and Career stories pages to see why our people love being here! As well as joining a certified B-Corp, multi‑award winning, fun, collaborative, people first organisation where your personal and professional skills will be developed to make you the best you can be, we offer an attractive benefits package designed to promote your overall wellbeing so that you are able to perform to your full potential both in and out of work. Currently our core benefits package includes:

For you:

• Hybrid working (see top of the advert for details)
• Professional study support (where applicable)
• Access to our internal Wellbeing, LGBTQ+, Multicultural and Women’s networks

For your family:

• Life assurance
• Income protection
• Enhanced maternity/paternity/adoption and shared parental leave

For your health:

• 26 days annual leave (pro-rata for part‑time working) plus bank holidays (most of which can be taken flexibly!) with options to buy & sell holiday
• Private medical insurance
• Discounted gym memberships, critical illness and dental insurance through our flexible benefits
• Cycle to work scheme
• Digital GP services

For your wealth:

• Discretionary bonus scheme
• Season ticket loans

For others:

• Volunteering opportunities

For the environment:

• Electric vehicle salary sacrifice scheme (qualifying period applies)

And much more!

We continuously strive to build an inclusive workplace where all forms of diversity are valued, including age, background, disability, gender, gender identity, gender expression, race, religion or sexual orientation.

LCP is committed to making our opportunities accessible to all and would welcome you getting in touch to let us know if an adjustment can be made to help with your application. This may be extra time for assessments, pre‑interview site visits, interview structure or questions, or asking us about building accessibility. Whatever it may be, please get in touch via our dedicated email address - [e-mail] to discuss how we can support you with your application.

Recruitment agencies

LCP operates a Preferred Supplier List (PSL) for recruitment agencies which is reviewed annually. We do not accept unsolicited CVs from agencies who are not part of our currentPSL. LCP only pay agency fees where we have a signed agreement in place, and the agency has been instructed by a member of our recruitment team to supply CVs via the Applicant Tracking System (ATS) for a legitimate, open vacancy. If this process is not adhered to, LCP reserve the right to contact these candidates directly and have discussions with them without paying any agency fees. We do not pay agency fees when speculative and unsolicited CVs are submitted to any employee or Partner at LCP.