Senior Endpoint Experience Engineer

Brevan Howard; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Brevan Howard is seeking an experienced Endpoint Engineer to build and maintain Windows 11 and macOS images, manage Intune and SCCM/MECM, and deploy applications across platforms. You will remediate vulnerabilities, collaborate with Cyber Security, and lead escalation for complex endpoint issues.

The role requires a strong background in end-user computing, Azure technologies, and enterprise scripting, with a focus on secure, compliant, and efficient endpoint management across a global estate.

Qualifications

• Bachelor’s degree in Engineering, computer science, or equivalent work experience.
• 5+ Years of experience specialising in Microsoft Azure technologies
• Experience with producing production and development support for business critical applications and servers

Responsibilities

• Build, configure and maintain Windows 11 and macOS device images and engineering standards.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity and impact to prioritise remediation.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure and aligned with standards.
• Track vendor patch releases and manage timely deployment of OS and application patches; recommend mitigation where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting on complex endpoint issues across Windows and macOS.
• Develop understanding of business processes and how they interact with endpoint technology to inform engineering decisions and priorities.
• Continually review and improve endpoint engineering processes, procedures and standards to drive operational excellence.

Skills

Intune

SCCM/MECM

PowerShell scripting

Active Directory

Azure AD

Conditional Access

SSO

Windows Server/Client

Jamf

Patch My PC

Education

Bachelor’s degree in Engineering, computer science, or equivalent

Tools

Jamf

Patch My PC

SCCM / MECM

Intune

Job description

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

Abou The Role

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

Work Experience/Background

Essential

• Ability to work in a challenging and dynamic environment
• Experience of providing production and development support for business critical applications and servers
• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
• 5+ Years of experience specialising in Microsoft Azure technologies
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.

Desirable

• Experience of working in a financial background is preferred.

Technical Skills

Essential

• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
• Microsoft SCCM / MECM, Jamf
• Patch My PC
• PowerShell scripting in enterprise production environments
• Microsoft Intune / Endpoint Management
• Intune update rings
• Windows 10 & 11 desktops - performance troubleshooting and optimization.
• General networking experience

Desirable

• Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)
• Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)
• A good understanding of the Azure technologies

Competencies

• Self-motivated individual that can work under their own initiative with minimal supervision
• Able to deal effectively with external suppliers and providers.
• Able to communicate effectively with end users, management, and other teams
• Take ownership of issues and follow through with them until resolution
• Excellent written and verbal communication
• Teamwork and interpersonal skills
• A willingness to learn and keep up to date with technologies