EUC Engineer: Intune & Defender for Endpoint (Hybrid)

Ashdown Group; Greater London; Hybrid; GBP 50,000 - 85,000; Full time

Job summary

Ashdown Group is recruiting for a senior endpoint engineer to manage Windows, iOS, and Android devices via Microsoft Intune. You will configure policies, ensure compliance, and deploy apps while owning lifecycle and security standards.

The role emphasizes hands-on ownership of security tooling (Defender for Endpoint) and identity controls (Entra ID, Conditional Access, MFA), with a strong focus on troubleshooting complex issues and driving automation. Hybrid office-based in London.

Qualifications

• 4-5 years experience in a 2nd line or endpoint engineering role within an SME, financial services, professional services, or MSP environment.
• Hands-on ownership of Microsoft Intune and Microsoft Defender for Endpoint.
• Strong experience with Entra ID (Azure AD), Conditional Access, MFA, and device compliance.
• Confident troubleshooting of complex endpoint, identity, and access issues.
• Experience using PowerShell for automation and process improvements.
• Strong understanding of endpoint security, compliance frameworks, and device management best practices.

Responsibilities

• Own and manage Windows 11, iOS, and Android endpoints using Microsoft Intune, including device configuration, compliance policies, patching, and application deployment.
• Maintain endpoint standards, lifecycle management, and secure device configurations.
• Investigate and remediate security alerts using Microsoft Defender for Endpoint, ensuring compliance with our organisational security standards.
• Manage identity and access through Entra ID, including Conditional Access, MFA, and device compliance.
• Act as a technical escalation point, handling complex endpoint and identity issues at senior 2nd / junior 3rd line level.
• Contribute to automation, process improvement, and IT projects such as device rollouts, office moves, and infrastructure upgrades.

Skills

PowerShell scripting

Endpoint security

Azure AD / Entra ID

Conditional Access

MFA

Device compliance

Troubleshooting

Tools

Microsoft Intune

Microsoft Defender for Endpoint

Job description

Ashdown Group is recruiting for a senior endpoint engineer to manage Windows, iOS, and Android devices via Microsoft Intune. You will configure policies, ensure compliance, and deploy apps while owning lifecycle and security standards.

The role emphasizes hands-on ownership of security tooling (Defender for Endpoint) and identity controls (Entra ID, Conditional Access, MFA), with a strong focus on troubleshooting complex issues and driving automation. Hybrid office-based in London.