End User Computing Engineer - Global Hedge Fund

DJRecruit Asia; Hong Kong; On-site; HKD 300,000 - 600,000; Full time

Job summary

DJRecruit Asia's client is seeking an experienced End User Computing Engineer to design, implement, and support modern endpoint management solutions for Windows devices. You will create and maintain Autopilot and deployment profiles, optimize Intune, manage hybrid Active Directory with Entra ID, and develop PowerShell automation for device provisioning and reporting.

The role requires hands-on experience with GPOs, conditional access, and end-user security, plus collaboration with security and

Qualifications

• Over 3 years of End User Computing experience.
• Hands-on Windows Autopilot experience (profile configuration, enrollment).
• Strong expertise in Microsoft Intune (device config, compliance, deployment and security).
• Experience with GPO management, hybrid GPO-to-Intune migrations.

Responsibilities

• Design, deploy, and maintain Windows Autopilot provisioning profiles.
• Manage Microsoft Intune for device configuration, compliance, app deployment, endpoint security, and conditional access policies.
• Develop, maintain, and troubleshoot GPOs; migrate policies to Intune where appropriate.
• Create PowerShell scripts and automation for device management, reporting, remediation, and bulk operations across Intune, AD, and M365.
• Administer Active Directory (on-premises) and Microsoft Entra ID (Azure AD).
• Support Microsoft 365 services related to end-user computing (Exchange Online, SharePoint Online, Teams, OneDrive).
• Troubleshoot complex endpoint, identity, and application issues; provide Tier 2/3 support and root-cause analysis.
• Collaborate with security and infrastructure teams to ensure devices meet compliance and zero-trust principles.
• Document processes, standards, and runbooks; stay current with Microsoft roadmap changes.

Skills

Windows Autopilot

Microsoft Intune

Group Policy

PowerShell scripting

Active Directory

Azure AD / Entra ID

Microsoft 365

Windows 11

Job description

Our client is looking for an experienced End User Computing Engineer to design, implement, and support modern endpoint management solutions. You will play a key role in delivering a secure, consistent, and productive experience for end users across Windows devices.

Responsibilities:

• Design, deploy, and maintain Windows Autopilot provisioning profiles and deployment profiles
• Manage and optimize Microsoft Intune for device configuration profiles, compliance policies, application deployment, endpoint security (including Windows Defender and Microsoft Defender for Endpoint integration), and conditional access policies
• Develop, maintain, and troubleshoot Group Policy Objects (GPOs) in hybrid Active Directory environments, migrating relevant policies to Intune where appropriate
• Create and maintain PowerShell scripts and automation solutions for device management, reporting, remediation, and bulk operations across Intune, Active Directory, and Microsoft 365
• Administer and support Active Directory (on-premises) and Microsoft Entra ID (Azure AD), including user/device lifecycle management, group management, hybrid identity (Azure AD Connect), and identity governance
• Support Microsoft 365 services related to end-user computing, including Exchange Online, SharePoint Online, Teams, OneDrive, and related security/compliance features
• Troubleshoot complex endpoint, identity, and application issues affecting end users; provide Tier 2/3 support and root-cause analysis
• Collaborate with security, identity, and infrastructure teams to ensure devices meet compliance, security baselines, and zero-trust principles
• Document processes, standards, and runbooks; contribute to continuous improvement of the end-user computing platform
• Stay current with Microsoft roadmap changes (Autopilot, Intune, Entra ID, Windows) and evaluate new capabilities for adoption

Requirements:

• Over 3 years of work experience in End User Computing
• Proven hands-on experience with Windows Autopilot (profile configuration, hardware hashing, self-deploying/user-driven modes, troubleshooting enrollment)
• Strong expertise in Microsoft Intune (device configuration, compliance, app protection/deployment and endpoint security)
• Solid experience with Group Policy management, troubleshooting, and hybrid GPO-to-Intune migration strategies
• Advanced PowerShell scripting skills for automation of Intune, Active Directory, Entra ID, and Microsoft 365 tasks
• Strong knowledge of Active Directory and Microsoft Entra ID
• Experience with Microsoft 365 administration in the context of end-user computing and device management
• Experience supporting Windows 11 enterprise environments at scale