Senior Endpoint Engineer – Windows & Intune (EUC Engineer III)

Condé Nast Germany; Bengaluru; In loco; INR 900.000 - 1.300.000; Tempo pieno

Descrizione del lavoro

Condé Nast Germany is seeking a hands-on End User Compute (EUC) Engineer in Bengaluru to shape and deliver improvements in device management, provisioning, automation, and hardware lifecycles. You will focus on Windows endpoint management with Intune, Autopilot, and PowerShell, while expanding Mac administration as needed.

You will maintain Intune environments, enable light-touch provisioning, and integrate Entra ID and Okta for robust device provisioning and access.

Competenze

• Senior endpoint engineer with hands-on administration of enterprise Windows environments.
• Strong Intune expertise across device enrolment, configuration, compliance and app deployment.
• Experience with Windows Autopilot and automated device provisioning.
• Experience migrating Windows endpoints between Entra ID tenants.
• Experience managing Windows updates and OS upgrades with testing and deployment rings.
• Strong PowerShell scripting for endpoint administration and reporting.
• Experience packaging and deploying Win32 apps using WinGet or similar.
• Familiarity with Entra ID device identities and Conditional Access.
• Experience with IdPs like Okta for SSO and user lifecycle management.

Mansioni

• Maintain and enhance Microsoft Intune environments for enrolment, configuration, compliance, and app management.
• Develop light-touch provisioning using Windows Autopilot with minimal manual intervention.
• Configure Intune, Entra ID, Windows Autopilot and Okta integration for reliable provisioning and access.
• Plan and execute endpoint migrations between Entra ID tenants with minimal disruption.
• Manage Windows update policies, deployment rings and OS upgrades with testing and remediation.
• Package, test, deploy, and maintain Windows apps using WinGet and related tools.
• Develop PowerShell scripts to automate recurring endpoint issues and improve reporting.
• Collaborate with Security teams to manage endpoint vulnerabilities and controls.
• Provide L3 support for enrolment, policy conflicts, app deployment, and authentication issues.
• Monitor device health and compliance; report outcomes to inform improvements.
• Contribute to EUC roadmap and own improvements from design to rollout.
• Maintain documentation and runbooks; train technical teams and end users.

Conoscenze

Intune

Autopilot

PowerShell

Entra ID

Okta

Windows OS

macOS

Chrome management

Endpoint security

Strumenti

Jamf Pro

Microsoft Graph

REST APIs

WinGet

Jira

Slack

Zoom

Descrizione del lavoro

Condé Nast is one of the world’s most renowned media publishing companies, creating and distributing every type of media today, spanning print and digital publishing in all formats. With a portfolio of some of today’s most influential brands, the company continues to grow its audience through a global operational and content infrastructure across its 12 owned and operated markets. Headquartered in New York City, the company’s owned and operated markets include China, France, Germany, India, Italy, Japan, Mexico & Latin America, Spain, Taiwan, UAE/Dubai, the U.K., and the U.S., with additional local license partners in over twenty additional markets across the globe. Lead brands include Vogue, The New Yorker, GQ, Architectural Digest, Condé Nast Traveler, Vanity Fair, Wired, Allure, Ars Technica, Bon Appétit, House & Garden, Pitchfork, Tatler, and Vogue Business.

Job Description

Location:

Bengaluru, KA

About The Role:

The End User Compute (EUC) team delivers the endpoint platforms, tools and services that enable our colleagues to work securely and effectively.

We are looking for a hands‑on engineer to help shape and deliver improvements across device management, provisioning, automation and hardware lifecycles. Your primary expertise will be Windows endpoint management, particularly Microsoft Intune, Windows Autopilot and PowerShell. Experience administering both Windows and macOS is highly valued. Strong Windows engineers who are willing to learn and take increasing responsibility for Mac administration are encouraged to apply.

KEY RESPONSIBILITIES:

• Maintain and enhance our Microsoft Intune environments, including device enrolment, configuration, compliance and application management, ensuring services remain secure, reliable and scalable.
• Develop and improve light‑touch provisioning using Windows Autopilot, with minimal manual IT intervention and a robust setup experience.
• Configure and troubleshoot the interactions between Intune, Microsoft Entra ID, Windows Autopilot and Okta, working with identity teams to support reliable device provisioning, authentication and access.
• Plan and deliver endpoint migrations between Microsoft Entra ID tenants, managing dependencies, device transitions, user access, testing and communications while minimising disruption.
• Manage Windows update policies, deployment rings and operating system upgrades, including compatibility testing, pilot deployments, phased rollouts, compliance monitoring and remediation of failed updates.
• Package, test, deploy and maintain Windows applications, including installation and detection logic, dependencies, upgrades and removal. Use WinGet and other appropriate tools to improve application management and employee self‑service.
• Develop reusable PowerShell scripts and automation to detect and remediate recurring endpoint issues, reduce manual administration and improve reporting. Apply appropriate testing, logging and error handling.
• Collaborate with Security teams to manage endpoint vulnerabilities, maintain endpoint security tools and implement controls such as encryption, security baselines and local administrator restrictions.
• Provide L3 support for complex issues involving device enrolment, policy conflicts, application deployment, updates, authentication and device trust. Investigate root causes, coordinate vendor escalations and implement lasting fixes through established incident, problem and change management processes.
• Monitor and report on device health, patch and device compliance, provisioning success and application deployment outcomes. Use findings to prioritise improvements and reduce recurring incidents.
• Contribute to the EUC roadmap and own assigned improvements from investigation and design through testing, implementation and operational handover, with clear rollout and recovery plans.
• Maintain technical documentation and runbooks, share knowledge, and provide training for technical teams and end users.

ESSENTIAL SKILLS & REQUIREMENTS

• Proven experience in a senior endpoint engineering or L3 EUC role, with strong hands‑on administration and troubleshooting of enterprise Windows environments.
• Strong Microsoft Intune expertise across device enrolment, configuration profiles, compliance policies, application deployment, update management and troubleshooting.
• Practical experience implementing and supporting Windows Autopilot and automated device provisioning.
• Experience migrating Windows endpoints from one Microsoft Entra ID tenant to another, including planning, dependency assessment, execution and validation, with consideration for device enrolment, user profiles and data, authentication and application access.
• Experience managing Windows updates and operating system upgrades through controlled testing, deployment rings, compliance monitoring and remediation.
• Strong PowerShell scripting skills, with experience developing and maintaining scripts for endpoint administration, detection, remediation and reporting.
• Experience packaging and deploying Win32 applications, including installation contexts, detection rules, dependencies, upgrades and deployment failure investigation. Practical familiarity with WinGet.
• Experience managing endpoint hardware lifecycles, including asset records, warranty and support status, refresh planning, redeployment and secure decommissioning.
• A strong understanding of Microsoft Entra ID device identities, join types, groups and the relationship between device compliance and Conditional Access.
• A strong understanding of Okta or an equivalent identity provider (IdP), including single sign‑on, multifactor authentication and user lifecycle management, with the ability to investigate endpoint‑related authentication issues.
• Familiarity with Google Chrome browser management.
• Strong analytical and troubleshooting skills, using logs, testing and evidence to identify root causes, recognise recurring problems and verify solutions.
• A practical, service‑focused approach, with a willingness to learn macOS administration and actively contribute to both Windows and Mac endpoint services.
• Strong communication skills in spoken and written English, with the ability to explain complex technical issues clearly to technical and non‑technical audiences, provide timely updates on progress and risks, produce useful documentation and share knowledge effectively across global teams.

DESIRABLE SKILLS & EXPERIENCE

• Enterprise macOS administration using Jamf Pro, including configuration profiles, application deployment, patching and troubleshooting.
• Familiarity with Apple Business Manager and Automated Device Enrolment.
• Experience using Microsoft Graph and REST APIs to automate endpoint administration, reporting and integrations.
• Experience with version control and maintaining shared scripts and technical documentation.
• Experience with endpoint detection and response, secure remote access or privileged access management tools.
• Experience implementing endpoint monitoring and telemetry tools to improve device reliability and employee experience.
• Familiarity with collaboration and service delivery platforms such as Jira, Slack and Zoom.
• Bash or shell scripting experience for macOS.
• Relevant certifications, such as Microsoft 365 Certified: Endpoint Administrator Associate, or relevant Jamf certifications.

Condé Nast is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, familial status and other legally protected characteristics.