Senior Endpoint Engineer – Windows & Intune (EUC Engineer III)

Condé Nast; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Condé Nast in Bengaluru is seeking a hands-on End User Compute engineer focused on Windows endpoint management using Microsoft Intune, Autopilot and PowerShell. You will improve device provisioning, security controls and OS upgrades across Windows and macOS endpoints.

You’ll configure enrolment, policies, and app deployment, migrate Entra ID tenants, and collaborate with Security to reduce vulnerabilities. The role offers a fast-paced environment with global support and opportunity to own

Qualifications

• Senior endpoint engineering or L3 EUC role with hands-on Windows admin.
• Strong Intune expertise across enrolment, config, compliance, application deployment, update management and troubleshooting.
• Practical experience implementing and supporting Windows Autopilot and automated device provisioning.
• Experience migrating Windows endpoints from one Microsoft Entra ID tenant to another, including planning, dependency assessment, execution and validation.
• Experience managing Windows updates and operating system upgrades through controlled testing, deployment rings, compliance monitoring and remediation.
• Strong PowerShell scripting skills, with experience developing and maintaining scripts for endpoint administration, detection, remediation and reporting.
• Experience packaging and deploying Win32 applications, including installation contexts, detection rules, dependencies, upgrades and deployment failure investigation. Practical familiarity with WinGet.
• Experience managing endpoint hardware lifecycles, including asset records, warranty and support status, refresh planning, redeployment and secure decommissioning.
• A strong understanding of Microsoft Entra ID device identities, join types, groups and the relationship between device compliance and Conditional Access.
• A strong understanding of Okta or an equivalent identity provider (IdP), including single sign-on, multifactor authentication and user lifecycle management, with the ability to investigate endpoint-related authentication issues.
• Familiarity with Google Chrome browser management.
• Strong analytical and troubleshooting skills, using logs, testing and evidence to identify root causes, recognise recurring problems and verify solutions.
• A practical, service-focused approach, with a willingness to learn macOS administration and actively contribute to both Windows and Mac endpoint services.
• Strong communication skills in spoken and written English, with the ability to explain complex technical issues clearly to technical and non-technical audiences, provide timely updates on progress and risks, produce useful documentation and share knowledge effectively across global teams.

Responsibilities

• Maintain and optimize Microsoft Intune environments and device enrolment.
• Develop light-touch provisioning using Windows Autopilot.
• Configure Intune, Entra ID, Windows Autopilot and Okta interactions.
• Plan endpoint migrations between Microsoft Entra ID tenants.
• Manage Windows update policies and deployment rings.
• Package, test, deploy Win32 apps with detection logic.
• Create reusable PowerShell scripts for remediation and reporting.
• Collaborate with Security to manage endpoint vulnerabilities.
• Provide L3 support for enrolment, policy conflicts, deployments, updates, authentication and device trust.
• Monitor device health and compliance; report outcomes.
• Contribute to EUC roadmap and runbooks.

Skills

Intune management

PowerShell scripting

Windows Autopilot

Okta identity

Entra ID

Mac administration

Win32 packaging

WinGet

Endpoint security

Troubleshooting

L3 support

Tools

Jamf Pro

Microsoft Graph

REST APIs

WinGet

Jira

Job description

Condé Nast is one of the world's most renowned media publishing companies, creating and distributing every type of media today, spanning print and digital publishing in all formats. With a portfolio of some of today's most influential brands, the company continues to grow its audience through a global operational and content infrastructure across its 12 owned and operated markets. Headquartered in New York City, the company's owned and operated markets include China, France, Germany, India, Italy, Japan, Mexico & Latin America, Spain, Taiwan, UAE/Dubai, the U.K., and the U.S., with additional local license partners in over twenty additional markets across the globe. Lead brands include Vogue, The New Yorker, GQ, Architectural Digest, Condé Nast Traveler, Vanity Fair, Wired, Allure, Ars Technica, Bon Appétit, House & Garden, Pitchfork, Tatler, and Vogue Business.Job DescriptionLocation:Bengaluru, KAAbout The Role:The End User Compute (EUC) team delivers the endpoint platforms, tools and services that enable our colleagues to work securely and effectively.We are looking for a hands-on engineer to help shape and deliver improvements across device management, provisioning, automation and hardware lifecycles. Your primary expertise will be Windows endpoint management, particularly Microsoft Intune, Windows Autopilot and PowerShell. Experience administering both Windows and macOS is highly valued. Strong Windows engineers who are willing to learn and take increasing responsibility for Mac administration are encouraged to apply.KEY RESPONSIBILITIES:Maintain and enhance our Microsoft Intune environments, including device enrolment, configuration, compliance and application management, ensuring services remain secure, reliable and scalable.Develop and improve light-touch provisioning using Windows Autopilot, with minimal manual IT intervention and a robust setup experience.Configure and troubleshoot the interactions between Intune, Microsoft Entra ID, Windows Autopilot and Okta, working with identity teams to support reliable device provisioning, authentication and access.Plan and deliver endpoint migrations between Microsoft Entra ID tenants, managing dependencies, device transitions, user access, testing and communications while minimising disruption.Manage Windows update policies, deployment rings and operating system upgrades, including compatibility testing, pilot deployments, phased rollouts, compliance monitoring and remediation of failed updates.Package, test, deploy and maintain Windows applications, including installation and detection logic, dependencies, upgrades and removal. Use WinGet and other appropriate tools to improve application management and employee self-service.Develop reusable PowerShell scripts and automation to detect and remediate recurring endpoint issues, reduce manual administration and improve reporting. Apply appropriate testing, logging and error handling.Collaborate with Security teams to manage endpoint vulnerabilities, maintain endpoint security tools and implement controls such as encryption, security baselines and local administrator restrictions.Provide L3 support for complex issues involving device enrolment, policy conflicts, application deployment, updates, authentication and device trust. Investigate root causes, coordinate vendor escalations and implement lasting fixes through established incident, problem and change management processes.Monitor and report on device health, patch and device compliance, provisioning success and application deployment outcomes. Use findings to prioritise improvements and reduce recurring incidents.Contribute to the EUC roadmap and own assigned improvements from investigation and design through testing, implementation and operational handover, with clear rollout and recovery plans.Maintain technical documentation and runbooks, share knowledge, and provide training for technical teams and end users.ESSENTIAL SKILLS & REQUIREMENTSProven experience in a senior endpoint engineering or L3 EUC role, with strong hands-on administration and troubleshooting of enterprise Windows environments.Strong Microsoft Intune expertise across device enrolment, configuration profiles, compliance policies, application deployment, update management and troubleshooting.Practical experience implementing and supporting Windows Autopilot and automated device provisioning.Experience migrating Windows endpoints from one Microsoft Entra ID tenant to another, including planning, dependency assessment, execution and validation, with consideration for device enrolment, user profiles and data, authentication and application access.Experience managing Windows updates and operating system upgrades through controlled testing, deployment rings, compliance monitoring and remediation.Strong PowerShell scripting skills, with experience developing and maintaining scripts for endpoint administration, detection, remediation and reporting.Experience packaging and deploying Win32 applications, including installation contexts, detection rules, dependencies, upgrades and deployment failure investigation. Practical familiarity with WinGet.Experience managing endpoint hardware lifecycles, including asset records, warranty and support status, refresh planning, redeployment and secure decommissioning.A strong understanding of Microsoft Entra ID device identities, join types, groups and the relationship between device compliance and Conditional Access.A strong understanding of Okta or an equivalent identity provider (IdP), including single sign-on, multifactor authentication and user lifecycle management, with the ability to investigate endpoint-related authentication issues.Familiarity with Google Chrome browser management.Strong analytical and troubleshooting skills, using logs, testing and evidence to identify root causes, recognise recurring problems and verify solutions.A practical, service-focused approach, with a willingness to learn macOS administration and actively contribute to both Windows and Mac endpoint services.Strong communication skills in spoken and written English, with the ability to explain complex technical issues clearly to technical and non-technical audiences, provide timely updates on progress and risks, produce useful documentation and share knowledge effectively across global teams.DESIRABLE SKILLS & EXPERIENCEEnterprise macOS administration using Jamf Pro, including configuration profiles, application deployment, patching and troubleshooting.Familiarity with Apple Business Manager and Automated Device Enrolment.Experience using Microsoft Graph and REST APIs to automate endpoint administration, reporting and integrations.Experience with version control and maintaining shared scripts and technical documentation.Experience with endpoint detection and response, secure remote access or privileged access management tools.Experience implementing endpoint monitoring and telemetry tools to improve device reliability and employee experience.Familiarity with collaboration and service delivery platforms such as Jira, Slack and Zoom.Bash or shell scripting experience for macOS.Relevant certifications, such as Microsoft 365 Certified: Endpoint Administrator Associate, or relevant Jamf certifications.What happens next?If you are interested in this opportunity, please apply, and we will review your application as soon as possible. You can update your resume or upload a cover letter at any time by accessing your candidate profile.Condé Nast is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, familial status and other legally protected characteristics.