Compliance & Security Specialist L1

Lenovo; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Lenovo is looking for an Endpoint Management & Patch Compliance Engineer in Mumbai, India. The role requires hands-on experience with SCCM (MECM) and Microsoft Intune, managing endpoint security and compliance across large enterprise environments.

Ideal candidates will have 2-7 years of experience with a strong troubleshooting background and the ability to work with extensive endpoint estates. Familiarity with endpoint security tools like SentinelOne is also important.

Qualifications

• 2-7 years of experience in endpoint management, patch management, or device compliance roles.
• Hands-on experience with SCCM/MECM and Microsoft Intune.
• Strong troubleshooting skills for endpoint and deployment issues.

Responsibilities

• Manage endpoint security and compliance controls across enterprise environments.
• Monitor and improve endpoint compliance posture.
• Troubleshoot SCCM client issues and patch deployment failures.

Skills

SCCM (MECM)

Microsoft Intune

Endpoint security tools (EDR)

Patch management lifecycle

PowerShell scripting

Tools

SCCM

Microsoft Intune

SentinelOne

Job description

Endpoint Management & Patch Compliance Engineer (SCCM + Intune)

Role & responsibilities

• Strong hands-on experience in endpoint management using SCCM (MECM) and/or Microsoft Intune
• Experience in managing endpoint security and compliance controls across enterprise environments
• Good understanding of patch management lifecycle, including patch deployment, monitoring, and compliance tracking
• Exposure to endpoint security tools such as SentinelOne, Microsoft Defender, or similar EDR solutions (supporting role, not primary SOC function)
• Experience in software deployment, OS updates, and endpoint configuration management
• Ability to monitor and improve endpoint compliance posture and remediate non-compliant systems
• Hands-on troubleshooting experience with:
  • SCCM client issues
  • Patch deployment failures
  • Device compliance issues
• Basic scripting knowledge (PowerShell preferred) for automation or remediation
• Familiarity with enterprise IT environments and working with large-scale endpoint estates

Preferred candidate profile

• 2-7 years of experience in endpoint management, patch management, or device compliance roles
• Hands-on experience with:
  • SCCM / MECM (mandatory or strong preference)
  • Microsoft Intune (good to have / preferred)
  • Experience in patch deployment, compliance monitoring, and endpoint configuration
  • Exposure to endpoint security tools (EDR/AV) but not purely SOC-focused roles
  • Experience working in enterprise environments (10,000+ endpoints preferred)
  • Strong troubleshooting skills for endpoint, patching, and deployment issues