Senior Endpoint Experience Manager

BREVAN HOWARD ASSET MANAGEMENT LLP; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Brevan Howard Asset Management LLP seeks an experienced Endpoint Engineer to build and maintain Windows 11 and macOS images and engineering standards for a global estate. You will manage Intune and SCCM/MECM policies, deploy applications, and ensure secure, compliant endpoint environments across the organisation.

You will remediate vulnerabilities, work with Cyber Security and Service Management, and provide senior escalation support while participating in overseas travel.

Qualifications

• Experience building and maintaining Windows 11 and macOS images.
• Experience with Intune and SCCM/MECM.
• Strong PowerShell scripting.
• Understanding of endpoint security practices.
• Bachelor’s degree in IT/Engineering or equivalent in a technical field.
• Experience in a financial services environment preferred.

Responsibilities

• Build, configure and maintain Windows 11 and macOS images and engineering standards across the global estate.
• Manage and administer endpoint platforms using Intune and SCCM/MECM, including policy configuration and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices.
• Collaborate with Cyber Security, Compliance and Service Management teams to stay secure and compliant.
• Act as senior escalation point for global support and guide complex endpoint issues.

Skills

Image engineering

Intune policy

SCCM/MECM

Azure AD/ADFS

PowerShell scripting

Endpoint security

Troubleshooting

Education

Bachelor’s degree in IT/Engineering

Tools

Jamf

Job description

MAIN DUTIES/RESPONSIBILITIES OF THE ROLE:

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

SPECIAL CIRCUMSTANCES (e. g. shifts, travel overseas, hours):

• 9 hour working days between core business hours (0800 – 1800)
• Some weekend and on-call work will also be necessary.
• Overseas travel will be required on occasion.

PERSON SPECIFICATION

WORK EXPERIENCE/BACKGROUND:

Essential

Desirable:

• Ability to work in a challenging and dynamic environment

• Experience of providing production and development support for business critical applications and servers

• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support

• 5+ Years of experience specialising in Microsoft Azure technologies

• Bachelor’s degree in Engineering, computer science, or equivalent work experience.

• Experience of working in a financial background is preferred.

Essential

Desirable:

• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)

• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS

• Microsoft SCCM / MECM, Jamf

• Patch My PC

• PowerShell scripting in enterprise production environments

• Microsoft Intune / Endpoint Management

• Intune update rings

• Windows 10 & 11 desktops - performance troubleshooting and optimization.

• General networking experience

• Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)

• Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)

• A good understanding of the Azure technologies

TECHNICAL SKILLS/KNOWLEDGE/PROFESSIONAL QUALIFICATIONS:

COMPETENCIES/OTHER REQUIREMENTS:

Self-motivated individual that can work under their own initiative with minimal supervision

Able to deal effectively with external suppliers and providers.

Able to communicate effectively with end users, management, and other teams

Take ownership of issues and follow through with them until resolution

Excellent written and verbal communication

Teamwork and interpersonal skills

A willingness to learn and keep up to date with technologies