Senior Endpoint Experience Engineer

P2P; Greater London; On-site; GBP 60,000 - 95,000; Full time

Job summary

P2P in the United Kingdom seeks a senior Endpoint Engineer to build, configure and maintain Windows 11 and macOS images, ensuring a high-quality end-user experience across the global estate and a consistent engineering standard.

You will manage Intune and SCCM/MECM, design and deploy apps, patching, vulnerability remediation, and work with Cyber Security and Compliance teams to keep endpoints secure and compliant. Some weekend/on-call work and overseas travel required.

Qualifications

• Bachelor’s degree in Engineering, computer science, or equivalent.
• 5+ years of experience with Microsoft Azure technologies.
• Experience with Intune / Endpoint Management.
• Experience with Active Directory and Group Policy.
• Financial sector experience preferred.

Responsibilities

• Build and maintain Windows 11 and macOS device images.
• Administer endpoint platforms with Intune and SCCM/MECM.
• Design and deploy apps across Windows/macOS via Intune and SCCM.
• Identify and remediate endpoint vulnerabilities across Windows/macOS.
• Collaborate with Cyber Security, Compliance and Service Management teams.
• Track and deploy OS and app patches in a controlled manner.
• Serve as senior escalation point for global support.
• Align endpoint decisions with business processes.
• Continuously improve endpoint engineering processes.

Skills

Self-motivated

Communication

Teamwork

Ownership of issues

Education

Bachelor’s degree in Engineering or Computer Science

Tools

Microsoft Intune

SCCM/MECM

Jamf

PowerShell scripting

Azure AD / ADFS / Conditional Access

Patch My PC

Microsoft 365

Job description

MAIN DUTIES/RESPONSIBILITIES OF THE ROLE:

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

SPECIAL CIRCUMSTANCES (e. g. shifts, travel overseas, hours):

• 9 hour working days between core business hours (0800 – 1800)
• Some weekend and on-call work will also be necessary.
• Overseas travel will be required on occasion.

PERSON SPECIFICATION

WORK EXPERIENCE/BACKGROUND:

Essential

Desirable:

• Ability to work in a challenging and dynamic environment
• Experience of providing production and development support for business critical applications and servers
• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
• 5+ Years of experience specialising in Microsoft Azure technologies
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.

• Experience of working in a financial background is preferred.

Essential

Desirable:

• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
• Microsoft SCCM / MECM, Jamf
• Patch My PC
• PowerShell scripting in enterprise production environments
• Microsoft Intune / Endpoint Management
• Intune update rings
• Windows 10 & 11 desktops - performance troubleshooting and optimization.
• General networking experience

• Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)
• Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)
• A good understanding of the Azure technologies

TECHNICAL SKILLS/KNOWLEDGE/PROFESSIONAL QUALIFICATIONS:

COMPETENCIES/OTHER REQUIREMENTS:

Self-motivated individual that can work under their own initiative with minimal supervision

Able to deal effectively with external suppliers and providers.

Able to communicate effectively with end users, management, and other teams

Take ownership of issues and follow through with them until resolution

Excellent written and verbal communication

Teamwork and interpersonal skills

A willingness to learn and keep up to date with technologies