Configuration Management Systems Engineer, Windows Endpoint Patching

JLL; México; Sur place; MXN 900 000 - 1 200 000; Plein temps

Résumé du poste

JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team in the Digital Workspace Services group. Based in the Mexico Center of Excellence, this role will manage Windows endpoints, focusing on lifecycle management, security, and configuration across a global environment of ~60,000 PCs and ~600 AWS Workspaces.

The ideal candidate brings strong troubleshooting, process improvement mindset, and ability to work with global

Qualifications

• In‑depth experience with Intune patching and device management, including Intune AutoPatch.
• Expertise in Windows 11 management lifecycle including Autopilot provisioning.

Responsabilités

• Test, validate, and deploy patches for Windows OS, drivers, BIOS, M365, and third‑party apps using Intune, MCM, PatchMyPC.
• Configure and manage Autopilot for device provisioning.
• Define and manage security patching policies using Intune and Group Policy (GPO).
• Monitor and troubleshoot Windows Update across tenant and endpoints.
• Collaborate with security to monitor and remediate CVEs and vulnerabilities.
• Provide input on process improvements and future endpoint management directions.
• Develop internal documentation and SOPs; participate in global follow‑the‑sun support.

Connaissances

Intune patching

Autopilot

Windows 11 management

PowerShell scripting

AI tools familiarity

Power BI reporting

SCCM/MCM

Windows Update troubleshooting

Outils

Intune

MCM/SCCM

PatchMyPC

Autopilot

Group Policy (GPO)

Power BI

Description du poste

April 2026

Job Title: Configuration Management Systems Engineer, Windows Endpoint Patching

Location: Mexico Center of Excellence (COE)

Summary

JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The ideal candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.

Key Responsibilities

• Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third‑party applications using Intune (primary), MCM, and PatchMyPC.
• Configure and manage Autopilot for device provisioning.
• Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).
• Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.
• Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.
• Act as a senior escalation point for complex endpoint issues, coordinating with internal support teams and external vendors to ensure timely resolution.
• Provide input into process improvements and the future direction of endpoint management technologies.
• Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.
• Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long‑term strategies.
• Participate in a global, follow‑the‑sun support model to address critical system issues and perform scheduled maintenance.

Required Qualifications

• In‑depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.
• Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user‑driven provisioning and pre‑provisioning) for device enrollment.
• Experience configuring and maintaining Autopilot using ESP, group tags, etc.
• Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM, Intune, and Windows log files, from both the tenant consoles and endpoint devices.
• Proficient in scripting with PowerShell to automate tasks and implement solutions.
• Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.
• Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.
• Demonstrated experience with patch testing and application testing methodologies.
• Experience with Microsoft Configuration Manager (MCM/SCCM).
• Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.
• Excellent technical, analytical, and problem‑solving skills with the ability to manage multiple projects simultaneously in a fast‑paced environment.
• Strong communication skills for effective collaboration with global teams.
• A reliable, self‑motivated, and disciplined work ethic.

Preferred Qualifications

• Experience with application packaging and deployment techniques.
• Knowledge of and experience with Microsoft Graph API.
• Experience using AI Assistants to improve efficiency and simplify day‑to‑day tasks is preferred.
• Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.
• Experience with virtual desktop environments (e.g., AWS Workspaces).
• Previous experience communicating directly with Executive Leadership.
• Prior experience working within a global, distributed team structure.