Senior Endpoint Experience Engineer

Brevan Howard; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

Brevan Howard Asset Management is seeking an experienced Endpoint Engineer to design, resource and build a robust global endpoint infrastructure. You will manage Windows and macOS devices, deploy apps, patch management and security controls across the estate.

You will collaborate with Cyber Security, Compliance and Service Management and act as a senior escalation point for the global support team. A strong Azure/Intune background and financial domain experience are highly valued.

Qualifications

• 5+ years of experience specialising in Microsoft Azure technologies.
• Experience providing production and development support for business-critical applications and servers.
• Experience communicating with IT staff, developers and desktop support.
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.
• Experience in a financial environment is preferred.

Responsibilities

• Build, configure and maintain Windows/macOS images and engineering standards for global estate.
• Manage endpoint platforms using Intune and SCCM/MECM, including policy baselines.
• Design, package, test and deploy applications across Windows and macOS via Intune/SCCM.
• Identify and remediate endpoint vulnerabilities across Windows/macOS environments.
• Collaborate with Cyber Security, Compliance and Service Management to ensure security and standards.
• Track patch releases and deploy OS and app patches in a controlled manner.
• Serve as senior escalation point for global support on endpoint issues.
• Develop understanding of business processes to inform engineering decisions.
• Continually review and improve endpoint engineering processes and standards.

Skills

Azure technologies

Windows Server

Active Directory

SCCM/MECM

PowerShell

Intune

Azure AD

Networking

Jamf

Intune update rings

Windows 10/11

Education

Bachelor's degree in Engineering or Computer Science

Tools

SCCM / MECM

Jamf

Patch My PC

Job description

Brevan Howard Asset Management is one of the leading absolute return/hedge fund managers, overseeing assets on behalf of institutional investors from around the world, including pension funds, endowments, insurance companies, government agencies, private banks, and fund of funds.

Brevan Howard was founded in 2002 and launched its flagship global macro strategy in April 2003. It currently manages over $25bn1 and engages in discretionary directional and relative value trading in fixed income and FX markets, as well as the recently launched BH Digital, a division within Brevan Howard to manage crypto and digital asset strategies.

The firm currently employs over 500 personnel worldwide, including over 100 investment professionals. This global presence gives Brevan Howard the ability to identify and source attractive investment opportunities, as well as investment management talent wherever they may be. Brevan Howard has won several industry awards for excellence in risk management, operational robustness, and investment performance.

The firm currently has offices in London, Edinburgh, Jersey, Geneva, New York, Austin, Chicago, Hong Kong, Singapore, and the Cayman Islands.

This role presents an exciting opportunity to help design, resource and build a new, robust best-in-class server infrastructure for Brevan Howard, the successful candidate will be able to combine their industry experience with a vision for further developments in a fast-paced environment.

MAIN DUTIES/RESPONSIBILITIES OF THE ROLE:

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

SPECIAL CIRCUMSTANCES (e. g. shifts, travel overseas, hours):

• 9 hour working days between core business hours (0800 – 1800)
• Some weekend and on-call work will also be necessary.
• Overseas travel will be required on occasion.

PERSON SPECIFICATION

WORK EXPERIENCE/BACKGROUND:

• Ability to work in a challenging and dynamic environment
• Experience of providing production and development support for business critical applications and servers
• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
• 5+ Years of experience specialising in Microsoft Azure technologies
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.
• Experience of working in a financial background is preferred.

TECHNICAL SKILLS/KNOWLEDGE/PROFESSIONAL QUALIFICATIONS:

• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
• Microsoft SCCM / MECM, Jamf
• Patch My PC
• PowerShell scripting in enterprise production environments
• Microsoft Intune / Endpoint Management
• Intune update rings
• Windows 10 & 11 desktops - performance troubleshooting and optimization.

General networking experience

• Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)
• Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)
• A good understanding of the Azure technologies

COMPETENCIES/OTHER REQUIREMENTS:

Self-motivated individual that can work under their own initiative with minimal supervision

Able to deal effectively with external suppliers and providers.

Able to communicate effectively with end users, management, and other teams

Take ownership of issues and follow through with them until resolution

Teamwork and interpersonal skills

A willingness to learn and keep up to date with technologies