Hybrid Windows Endpoint Engineer (Mexico City)

Marsh Agency; Ciudad de México; Hybrid; MXN 700,000 - 1,000,000; Full time

Job summary

Marsh Agency in Mexico City is seeking a Windows Endpoint Engineer to join the team. This hybrid role requires in-office work at least three days per week and focuses on modern device management, Windows deployment and servicing, endpoint security and compliance.

You will collaborate with security, identity, network and service teams to deliver secure, scalable solutions, designing provisioning workflows with Intune, Entra ID and Autopilot, and automating with PowerShell.

Qualifications

• 5+ years of experience working in Windows Endpoint support.
• Strong experience of engineering and supporting Windows 11 endpoints in a large, distributed enterprise environment.
• Hands-on experience with Microsoft Intune, Entra ID, Windows Autopilot and cloud-based Windows configuration and compliance.
• Experience with Windows deployment, servicing, recovery and troubleshooting, including feature updates, quality updates, drivers and firmware.
• Strong knowledge of application deployment, update management and compatibility troubleshooting for Microsoft 365 Apps and enterprise Windows applications.
• Practical PowerShell automation skills and experience working with APIs, Microsoft Graph or structured data formats such as JSON, XML and CSV.
• Good understanding of endpoint security, identity, compliance and access controls, including BitLocker, Secure Boot and Windows Hello for Business.
• Ability to analyse complex technical problems, communicate clearly with technical and non-technical stakeholders, and produce high-quality engineering documentation.

Responsibilities

• Engineer and maintain the enterprise Windows endpoint platform, including laptops, desktops, virtual endpoints and specialist device configurations.
• Design and support modern provisioning and lifecycle workflows using Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only device scenarios.
• Manage Windows configuration, feature updates, quality updates, servicing rings, drivers, BIOS, firmware, UEFI and supporting hardware standards.
• Engineer and improve application packaging, deployment, update and remediation processes, working with application owners to reduce compatibility and colleague-experience issues.
• Implement and maintain endpoint security and compliance capabilities, including BitLocker, Secure Boot, Defender controls, Windows Hello for Business and security baselines.
• Use PowerShell, Microsoft Graph and workflow automation to remove manual effort, improve control and integrate endpoint services with platforms such as ServiceNow.
• Use endpoint telemetry and digital employee experience data to identify trends, assess change impact and proactively improve device health, performance and reliability.
• Lead technical investigation and root-cause analysis for complex tier III incidents, engaging Microsoft and other technology vendors where required.
• Translate business, colleague, security and operational requirements into technical designs, implementation plans, testing approaches and production acceptance criteria.
• Create and maintain roadmaps, standards, engineering guides, release documentation, support knowledge and operational handover materials.
• Contribute to peer reviews, technical governance, proof-of-concept activity and continual improvement across the global endpoint engineering service.

Tools

Microsoft Intune

Entra ID

Windows Autopilot

PowerShell

Microsoft Graph

ServiceNow

JSON

XML

CSV

Job description

Marsh Agency in Mexico City is seeking a Windows Endpoint Engineer to join the team. This hybrid role requires in-office work at least three days per week and focuses on modern device management, Windows deployment and servicing, endpoint security and compliance.

You will collaborate with security, identity, network and service teams to deliver secure, scalable solutions, designing provisioning workflows with Intune, Entra ID and Autopilot, and automating with PowerShell.