Lead, End User Computing & Endpoint Experience

Intermediate Capital Group (ICG); Greater London; On-site; GBP 110,000 - 140,000; Full time

Job summary

Intermediate Capital Group (ICG) is seeking an experienced Principal, End User Computing Team Lead for a 6-month fixed-term contract in London. You will lead the day-to-day delivery, security and continual improvement of endpoint services across Windows laptops, mobile devices and Cloud PCs, working closely with Service Desk, Infrastructure, Architecture and Cyber Security teams.

The role balances hands-on technical delivery with leadership, focusing on Intune, Autopilot, patching, deployment

Qualifications

• Strong hands-on experience administering Microsoft Intune and modern endpoint management services.
• Strong knowledge of Windows 11 administration, configuration, deployment and troubleshooting.
• Experience designing, maintaining and supporting Windows Autopilot or Autopilot Device Preparation services.
• Experience supporting Microsoft 365 workplace services in an enterprise environment.
• Experience delivering software deployment, application lifecycle management and patching solutions.
• Good understanding of endpoint security, compliance, Conditional Access, encryption and endpoint protection controls.
• Experience leading technical teams, managed service providers or delivery partners.
• Ability to analyse complex technical issues and translate findings into clear decisions and remediation plans.
• Excellent written and verbal communication, with the ability to engage and influence stakeholders.
• An organised and delivery-focused approach, with the ability to balance operational priorities and project commitments.

Responsibilities

• Provide day-to-day leadership, direction and guidance to EUC engineers and service providers.
• Prioritise workloads and ensure operational tickets, service requests and project activities are delivered within agreed service levels.
• Act as the escalation point for complex endpoint and workplace technology issues.
• Promote knowledge sharing, effective documentation and close collaboration across internal and outsourced teams.
• Drive a culture of ownership, automation and continual service improvement.
• Own the lifecycle management of Windows laptops, desktops, mobile devices and Windows 365 Cloud PCs.
• Lead the administration and continual improvement of Microsoft Intune, including configuration profiles, compliance policies, security baselines and application assignments.
• Maintain and enhance Windows Autopilot and Autopilot Device Preparation processes, secure standard builds and device handover procedures.
• Oversee hardware refresh, replacement and disposal programmes, maintaining accurate asset and configuration data.
• Ensure the endpoint estate remains standardised, supportable and aligned with business, security and regulatory requirements.
• Own software packaging, testing, deployment, upgrade and removal processes across the endpoint estate.
• Ensure operating systems, Microsoft 365 Apps and third-party applications remain patched and compliant within agreed targets.
• Oversee endpoint management and automation platforms used for application deployment, patching, inventory and remediation.
• Work with Cyber Security and infrastructure teams to remediate vulnerabilities identified through scanning, monitoring and threat intelligence.
• Develop repeatable, controlled deployment processes with clear reporting, rollback and exception management.
• Support and improve Microsoft 365 workplace services, including Outlook, Teams, OneDrive, SharePoint, Microsoft 365 Apps and Microsoft 365 Copilot.
• Partner with business stakeholders to improve productivity, adoption and user experience.
• Support responsible AI enablement and the operational adoption of Copilot and related workplace capabilities.
• Contribute to service roadmaps, standards and technical decisions affecting the modern workplace.
• Implement and maintain endpoint security controls in partnership with Cyber Security.
• Support Conditional Access, multifactor authentication, application control, endpoint protection, encryption and device compliance initiatives.
• Monitor endpoint compliance and investigate data quality, duplication and coverage gaps across management and security platforms.
• Ensure operational processes support internal policy, audit and regulatory requirements.
• Provide clear evidence, reporting and remediation plans for endpoint risks and control exceptions.
• Monitor and improve digital employee experience using endpoint telemetry, performance data, incident trends and user feedback.
• Identify recurring issues and lead proactive remediation to improve device performance, reliability and employee satisfaction.
• Identify opportunities for automation, self-service and reduced manual support effort.
• Define meaningful service measures and provide management updates on performance, risk and improvement activity.
• Manage relationships with technology vendors, deployment partners and service providers, ensuring they meet operational and security expectations.
• Participate in product evaluations, proofs of concept, commercial reviews and technology selection exercises.
• Provide technical input into strategic planning, architecture decisions and workplace technology roadmaps.
• Produce and maintain technical documentation, operating procedures, project updates and management reports.

Skills

Intune administration

Windows 11

Autopilot

Microsoft 365

Software deployment

Endpoint security

Leadership

Vendor management

Documentation

PowerShell scripting

Tools

PowerShell scripting

Job description

Intermediate Capital Group (ICG) is seeking an experienced Principal, End User Computing Team Lead for a 6-month fixed-term contract in London. You will lead the day-to-day delivery, security and continual improvement of endpoint services across Windows laptops, mobile devices and Cloud PCs, working closely with Service Desk, Infrastructure, Architecture and Cyber Security teams.

The role balances hands-on technical delivery with leadership, focusing on Intune, Autopilot, patching, deployment