Senior EUC Engineer: Intune, Defender & Entra ID Ops

Ashdown Group; Greater London; Hybrid; GBP 50,000 - 85,000; Full time

Job summary

Ashdown Group is seeking an experienced EUC Engineer for our Central London office. You will own Windows 11, iOS, and Android endpoints via Microsoft Intune, configure policies, and drive security with Defender for Endpoint and Entra ID.

The role combines hands-on technical delivery with policy governance and ongoing security improvement. The position is primarily office-based in London with one day per week home working.

Qualifications

• 4–5 years experience in endpoint engineering or senior 2nd line roles in financial services, professional services, SME, or MSP environments.
• Hands-on ownership of Microsoft Intune, including device management, compliance policies, application deployment, and endpoint configuration.
• Strong practical experience administering Microsoft Defender for Endpoint, including security alert investigation, EDR capabilities, remediation activities, and endpoint security management.
• Good understanding of endpoint security principles, including security baselines, hardening, Attack Surface Reduction policies, vulnerability management, and compliance controls.
• Strong experience with Entra ID, including Conditional Access, MFA, device compliance, and identity management.
• Strong Windows 11 troubleshooting and endpoint engineering skills.
• Experience using PowerShell and Microsoft Graph for automation and operational improvements.
• Confident troubleshooting complex endpoint, identity, access, and security-related issues.
• Desirable: experience supporting Microsoft Secureworks MDR environments
• Desirable: exposure to Meraki networking technologies
• Desirable: exposure to Egnyte governance and collaboration platforms
• Desirable: experience supporting Azure infrastructure services

Responsibilities

• Own and manage Windows 11, iOS, and Android endpoints using Microsoft Intune, including Autopilot provisioning, device configuration, compliance policies, patching, update management, and application deployment.
• Maintain endpoint security standards, device lifecycle management, and secure configuration baselines aligned to Microsoft and industry best practices.
• Administer and support Microsoft Defender for Endpoint, including alert triage, investigation, machine isolation, remediation activities, and EDR-related security operations.
• Manage ASR policies, device control policies, endpoint security settings, and Intune security baselines.
• Create, maintain, and improve endpoint compliance frameworks aligned to organisational security policies and recognised security benchmarks.
• Manage identity and access through Entra ID, including Conditional Access, MFA, device compliance, device registration, and identity-related troubleshooting.
• Investigate and resolve complex endpoint, identity, and security incidents, acting as a senior technical escalation point across the business.
• Deliver vulnerability remediation and patch management activities in line with business risk and security requirements.
• Develop automation and operational improvements using PowerShell, Microsoft Graph, and Microsoft security tooling.
• Contribute to IT projects including endpoint refreshes, office moves, infrastructure upgrades, and technology improvements.
• Produce and maintain high-quality technical documentation and end-user knowledge articles

Skills

Endpoint security

Identity management

Automation

Troubleshooting

Communication

Tools

Microsoft Intune

Defender for Endpoint

Entra ID

PowerShell

Microsoft Graph

Job description

Ashdown Group is seeking an experienced EUC Engineer for our Central London office. You will own Windows 11, iOS, and Android endpoints via Microsoft Intune, configure policies, and drive security with Defender for Endpoint and Entra ID.

The role combines hands-on technical delivery with policy governance and ongoing security improvement. The position is primarily office-based in London with one day per week home working.