EUC (Virtual Drive 17-Sep-26_)

Tata Consultancy Services; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

The Tata Consultancy Services EUC SME is the senior technical authority responsible for the design, engineering, implementation, integration, optimisation, and L3 support of enterprise end-user computing platforms.

This role covers Windows endpoints, Intune, SCCM, Autopilot, Microsoft 365, application packaging, endpoint security, mobility, VDI, automation, and device lifecycle management, with responsibility for engineering standards and mentoring operations teams.

Qualifications

• Extensive experience in end-user computing engineering and L3 support.
• Strong expertise in Intune and SCCM.
• Experience with Windows Autopilot and configuration management.
• Proficient in PowerShell automation and Graph API.
• Knowledge of Microsoft 365 services and security features.

Responsibilities

• Act as L3 escalation and design authority for EUC services.
• Design scalable endpoint-management solutions.
• Engineer and operate Intune, SCCM, Autopilot, and endpoint security.
• Diagnose incidents and deliver permanent fixes.
• Define standards, baselines, and deployment procedures.
• Automate administrative tasks and compliance processes.
• Lead workstreams for migrations and modernization.
• Mentor junior engineers and improve support capabilities.
• Collaborate with security, IAM, network, and architecture teams.
• Maintain up-to-date technical documentation.

Skills

Intune/Endpoint Manager

SCCM

Windows Autopilot

PowerShell automation

Microsoft 365

Entra ID/CA/MFA

Defender for Endpoint

BitLocker management

Tools

ServiceNow

ITIL

MDM/MAM tooling

Job description

Role & responsibilities

2. Job Description EUC Subject Matter Expert (SME)

Job Title

End User Computing Subject Matter Expert / EUC L3 SME / Modern Workplace SME

Role Summary

The EUC SME is the senior technical authority responsible for the design, engineering, implementation, integration, optimisation, and L3 support of enterprise end-user computing platforms.

The role owns complex technical solutions across Windows endpoints, Microsoft Intune, SCCM, Windows Autopilot, Microsoft 365, application packaging, endpoint security, mobility, virtual desktops, automation, and device lifecycle management. The SME provides final-level technical escalation, defines engineering standards, leads root-cause analysis, supports transformation projects, and mentors operational teams.

Current market descriptions position EUC SMEs as technical authorities for Intune migration, Autopilot, advanced PowerShell automation, endpoint compliance, large-scale device lifecycle management, and collaboration with security and executive stakeholders.

Key Accountabilities

• Serve as the L3 technical escalation and design authority for EUC services.
• Design scalable, secure, supportable, and standardised endpoint-management solutions.
• Engineer and operate Intune, SCCM, Autopilot, Windows servicing, application deployment, and endpoint-security capabilities.
• Diagnose complex incidents and deliver permanent corrective solutions.
• Define technical standards, configuration baselines, test plans, deployment methods, and operating procedures.
• Automate repetitive administration, remediation, reporting, and compliance tasks.
• Lead technical workstreams for migrations, upgrades, service transitions, and modernisation programmes.
• Mentor L1/L2 engineers and improve support-team capability.
• Work closely with security, IAM, network, cloud, service desk, application, and architecture teams.
• Ensure technical documentation and knowledge are complete and current.

Technical Scope

The SME should possess deep expertise in several of the following areas and working knowledge across the wider EUC portfolio:

• Microsoft Intune and Endpoint Manager
• Microsoft Configuration Manager/SCCM
• Windows Autopilot
• Windows 10/11 engineering and lifecycle management
• Application packaging and software distribution
• PowerShell and Microsoft Graph automation
• Microsoft 365 platform services
• Microsoft Entra ID, Conditional Access, MFA, and SSO integration
• Defender for Endpoint and endpoint security controls
• Microsoft Purview, sensitivity labelling, and DLP support
• BitLocker and encryption compliance
• Mobile device and application management
• Virtual desktop platforms
• Active Directory, Group Policy, PKI, and certificates
• Endpoint analytics and user‑experience monitoring
• Hardware lifecycle, asset management, CMDB, and software licence data
• ServiceNow and ITIL‑aligned operational processes
• Printing, peripherals, remote support, and VIP support dependencies

Key Responsibilities

Solution Design and Engineering

• Translate business and service requirements into technical designs and implementation plans.
• Produce high-level and low-level designs, configuration standards, logical diagrams, build documents, test plans, implementation procedures, and rollback plans.
• Define device‑management architecture for corporate, shared, kiosk, privileged, mobile, and BYOD use cases.
• Design co‑management, workload migration, or cloud‑native endpoint‑management approaches.
• Define configuration profiles, compliance policies, security baselines, enrolment restrictions, filters, scope tags, role‑based access, and assignment models.
• Design Windows Autopilot profiles and user‑driven, pre‑provisioned, self‑deploying, or shared‑device scenarios.
• Define Windows Update for Business rings, feature‑update policies, driver‑management methods, expedite policies, and deployment controls.
• Ensure designs align with security, IAM, network, application, data‑protection, and enterprise‑architecture requirements.

These responsibilities align with modern Intune engineering roles covering co‑management, Autopilot, compliance profiles, security baselines, update rings, application deployment, and lifecycle management.

Endpoint Management

• Administer and engineer Intune and SCCM environments.
• Manage enrolment, inventory, application delivery, configuration, patching, compliance, reporting, and remediation.
• Design and support collections, queries, boundaries, distribution points, task sequences, deployment types, baselines, and reporting in SCCM.
• Manage MDM, MAM, corporate‑owned devices, personally owned devices, and application protection policies.
• Troubleshoot enrolment, synchronisation, policy deployment, application installation, compliance, and Autopilot failures.
• Support tenant, hierarchy, connector, certificate, and integration components.
• Maintain platform health, capacity, role separation, and administrative security.

Windows Engineering

• Design, build, secure, and maintain Windows 10/11 images and provisioning methods.
• Support Autopilot, MDT, DISM, task‑sequence, or equivalent deployment approaches where applicable.
• Maintain security hardening, Group Policy, configuration baselines, AppLocker or application‑control policies, and local‑administrator controls.
• Manage monthly quality updates, feature updates, zero‑day remediation, driver updates, and rollback procedures.
• Analyse compatibility and readiness for new Windows versions.
• Support standard, technical, laboratory, manufacturing, kiosk, and shared‑device use cases.
• Maintain build, re‑image, recovery, and secure‑wipe procedures.

Current EUC engineering postings emphasise Windows 11 imaging, Autopilot, MDT, DISM, application packaging, OS patching, endpoint remediation, and compliance.

Application Packaging and Deployment

• Package and deploy Win32, MSI, MSIX, Microsoft Store, line‑of‑business, and script‑based applications.
• Define detection rules, requirement rules, dependencies, supersedence, uninstall methods, return‑code handling, and deployment assignments.
• Conduct technical testing for installation, repair, upgrade, rollback, coexistence, and uninstallation.
• Ensure packages support silent installation and removal.
• Assess compatibility with Windows upgrades, security controls, and other enterprise applications.
• Automate packaging and deployment activities where practical.
• Maintain application catalogue, packaging records, deployment versions, and retirement plans.
• Coordinate user acceptance testing and deployment approvals.

Microsoft 365 and Collaboration Services

• Provide engineering and L3 support across Exchange Online, Teams, SharePoint Online, OneDrive, and related Microsoft 365 workloads.
• Support tenant configuration, policy implementation, integration, migration, troubleshooting, and service optimisation.
• Work with IAM teams on Entra ID, authentication, Conditional Access, SSPR, MFA, and hybrid identity.
• Support Microsoft Purview controls, sensitivity labels, DLP, retention, and user‑impact troubleshooting.
• Support Microsoft 365 backup and restoration solutions where included in scope.
• Contribute to Microsoft Copilot readiness, data‑governance prerequisites, pilot design, and controlled rollout where required.
• Support governance for Power Platform, Microsoft Viva, and related productivity services where applicable.

Current senior EUC architecture roles include Microsoft 365 platform governance, Copilot readiness, Entra ID, Intune, Purview, Power Platform, physical endpoints, mobile platforms, and virtual desktops.

Endpoint Security and Compliance

• Implement and support Defender for Endpoint, antivirus, attack‑surface‑reduction rules, firewall profiles, web protection, and endpoint‑detection controls.
• Configure and maintain BitLocker, recovery‑key escrow, encryption reporting, and lost‑device evidence.
• Support DLP, Microsoft Purview, secure mail, phishing‑related endpoint actions, and related compliance controls.
• Implement Conditional Access device‑compliance dependencies.
• Support privileged endpoint management, removal of excessive local‑administrator rights, and approved elevation solutions.
• Analyse vulnerabilities and coordinate patching, reconfiguration, isolation, or compensating controls.
• Support security incidents, forensic evidence collection