Senior Endpoint Engineer

Kryptos Technologies limited; Greater London; On-site; Confidential; Full time

Job summary

Kryptos Technologies limited is seeking a Senior Endpoint Engineer in London to lead the Azure Virtual Desktop and Intune implementations for both physical devices and virtual workspaces. The role requires deep expertise in end-user computing, security, and enterprise device management.

Responsibilities include managing the AVD environment, creating images, deploying VMs, and developing automated deployment pipelines for software and patches.

Qualifications

• 8+ years total work experience, 5+ years implementing Intune solutions.
• 5 years experience as a system engineer.
• Desktop engineering and support in an enterprise environment.
• Experience with Windows 11, Active Directory Structure, and Group Policy management.
• Experience deploying software packages (InstallShield or equivalent).
• VDI experience (Azure Virtual Desktop preferred).
• Expertise in Endpoint Protection Engineering, MECM and Intune.
• Patch management including BIOS/firmware and updates.

Responsibilities

• Deliver technology and products in the roadmap on schedule and with high quality.
• Provide guidance to carry out plans, ensuring schedule adherence and performance.
• Provide last-tier support including root-cause analysis and preventative measures.
• Offer expert technical support for End User Computing and Endpoint Security.
• Partner with other Engineering teams to develop solutions.
• Manage the Azure Virtual Desktop environment (images, VMs, performance).
• Develop automated deployment of software, patches, and images.
• Engineer and maintain Windows desktop images and lifecycle of standard devices.
• Design and implement Intune policies for deployment, compliance, and security.
• Ensure integration with Microsoft 365 services.
• Design Windows 11 provisioning with Intune Autopilot and Updates for Business.

Education

Bachelor3s degree

Tools

Intune

Azure Virtual Desktop

MECM

Group Policy

Active Directory

SCCM

BIOS/firmware updates

SQL Server

Job description

Tasks

Senior Endpoint Engineer

Location: London,UK (onsite)

Full time- Permanent

ROLE SUMMARY

The Senior Endpoint Engineer is responsible for engineering, enhancing, and supporting the organization’s Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. The role requires strong technical expertise, disciplined operational processes, and deep knowledge of endpoint technologies to ensure stable, secure, and efficient end‑user computing services across the enterprise. This position directly impacts nearly all users and plays a critical role in maintaining a reliable and secure endpoint ecosystem.

ROLE RESPONSIBILITIES

• Drive to deliver technology and products in the roadmap on schedule and with the highest quality.
• Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.
• Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.
• Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.
• Partner with other Engineering teams to develop solutions.
• Manage the Azure Virtual Desktop (AVD) environment including creating images, deploy VMs, monitor VM performance.
• Develop automated solutions for deploying software packages, application patches/updates and workstation images.
• Engineer and support multiple Windows desktop images.
• Manage the entire lifecycle of our global standard desktop and laptop models.
• Design and implement Microsoft Intune solutions that meet end user requirements.
• Create and manage Intune policies for application deployment, device compliance, and security configurations.
• Ensure seamless integration with other Microsoft 365 services.
• Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.
• Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.
• Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.
• Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.
• Maintain desktop images and modify SCCM task sequences as needed.
• Package, test, and deploy new applications as needed.
• Maintain and expand existing Knowledge Base.
• Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.

Requirements

TECHNICAL QUALIFICATIONS

• 8+ years total work experience, 5+ of those years with proven experience in designing and implementing Microsoft Intune solutions.
• 5 years’ experience as a system engineer.
• Desktop engineering and support experience in an enterprise environment.
• Proven experience with Windows 11, Active Directory Structure, and Managing Group Policies.
• Experience developing and testing software packages using Install shield, or equivalent.
• Skills managing a VDI environment (Azure Virtual Desktop preferred).
• Expert level experience within End Point Protection Engineering.
• Expertise in MECM and Intune.
• Expert in patch management including bios and firmware updates, service pack upgrades, and application-based updates.
• Basic Database Administration experience, particularly in SQL Server.

GENERAL QUALIFICATIONS

• Proficient communication skills, both written and verbal.
• Possess sound organization and problem-solving skills.
• Excellent ability to work in a team environment.
• Motivated to learn and grow professionally.

EDUCATION REQUIREMENTS

• Bachelor’s degree from an accredited college or university.