Workplace Consultant

Pyramid Consulting, Inc; Birmingham; On-site; GBP 60,000 - 90,000; Full time

Job summary

Pyramid Consulting, Inc. in Birmingham, UK is seeking an experienced Enterprise Endpoint Management specialist to lead design, deployment, and governance of our Intune-based device management program.

You will work onsite, collaborate with security and IT ops, and drive modernization through Autopatch, Defender for Endpoint, and Zero Trust initiatives.

Qualifications

• 5+ years of enterprise Endpoint Management experience with Intune/Microsoft Endpoint Manager in large-scale environments.
• Deep hands-on expertise in Microsoft Intune Administration and Architecture.
• Experience with Windows Autopilot, ABM/DEP, and Android Enterprise.
• Configuration Profiles, Compliance Policies, Security Baselines, Proactive Remediations.
• Endpoint Security, Conditional Access, Defender for Endpoint, and Zero Trust principles.
• Win32 Packaging, IntuneWin, macOS Package Management, Apple VPP, Managed Google Play.
• Windows Update for Business, Autopatch, and update governance.
• Device Encryption (BitLocker/FileVault), SCEP/PKCS Certificates, Wi-Fi and VPN Profiles.
• Microsoft Entra ID Device Management, Dynamic Groups, Device Filters, RBAC.
• Advanced PowerShell scripting and automation; Microsoft Graph API expertise preferred.
• Strong understanding of Endpoint Security, PKI, Identity Management, Networking, and Cloud Technologies.
• Experience designing and implementing enterprise-scale endpoint management solutions.
• Strong ITIL process knowledge covering Incident, Change, Problem, Release, and Service Management.
• Eligible for UK Security Clearance.

Skills

Intune Administration

Microsoft Endpoint Manager

Windows Autopilot

Apple Business Manager

Android Enterprise

Configuration Profiles

Compliance Policies

Security Baselines

Proactive Remediations

Endpoint Security

Conditional Access

Defender for Endpoint

Zero Trust

Win32 Packaging

IntuneWin

macOS Package Management

Apple VPP

Managed Google Play

Windows Update for Business

Autopatch

RBAC

SCEP/PKCS Certificates

PowerShell Scripting

Microsoft Graph API

Dynamic Groups

Device Management

ITIL

UK Security Clearance

Job description

Location: Birmingham, UK (3 days a week)

Employment Type: Full Time, BPSS active or SC eligible, Work from Office

Required Skills & Experience

• 5+ years of enterprise Endpoint Management experience with Microsoft Intune/Microsoft Endpoint Manager in large-scale environments.

Deep hands-on expertise in:

• Microsoft Intune Administration and Architecture.
• Windows Autopilot, Apple Business Manager (ABM/DEP), Android Enterprise.
• Configuration Profiles, Compliance Policies, Security Baselines, Proactive Remediations.
• Endpoint Security, Conditional Access, Defender for Endpoint, Zero Trust principles.
• Win32 Application Packaging, IntuneWin, macOS Package Management, Apple VPP, Managed Google Play.
• Windows Update for Business, Autopatch, Feature Update Management, Quality Update Governance.
• Device Encryption (BitLocker, FileVault), SCEP/PKCS Certificates, Wi-Fi and VPN Profiles.
• Microsoft Entra ID Device Management, Dynamic Groups, Device Filters, RBAC.
• Advanced PowerShell scripting and automation experience; Microsoft Graph API expertise preferred.
• Strong understanding of Endpoint Security, PKI, Identity Management, Networking, and Cloud Technologies.
• Experience designing and implementing enterprise-scale endpoint management solutions.
• Strong ITIL process knowledge covering Incident, Change, Problem, Release, and Service Management.
• Eligible for UK Security Clearance.

Preferred Skills

• Endpoint architecture and migration experience from Configuration Manager (SCCM/MECM) to Intune.
• Experience with Microsoft Autopatch, Defender for Endpoint, and Microsoft Security ecosystem integrations.
• Advanced KQL development, Log Analytics, Workbooks, and endpoint reporting.
• Experience developing custom remediation, automation, and self-healing solutions.
• ServiceNow integration, CMDB management, and endpoint asset governance experience.
• Exposure to Microsoft Copilot for Security and AI-driven endpoint operations.