Professional, IT Operations

Jones Lang LaSalle Incorporated; Jalisco; Remote; MXN 550,000 - 850,000; Full time

Job summary

Jones Lang LaSalle Incorporated is seeking a Configuration Management Systems Engineer for our Mexico COE. You will manage Windows endpoints lifecycle, patching, security compliance, and Autopilot provisioning for a global fleet of ~60,000 devices including ~600 AWS Workspaces.

You will collaborate with security and global teams to resolve complex issues. The role emphasizes automation via PowerShell, AI-assisted tooling, and ongoing process improvements in a fast-paced environment with

Qualifications

• In-depth experience with Intune patching for OS, drivers, BIOS, apps and Autopatch.
• Experience with Autopilot device provisioning and ESP/group tags.
• Proficient in PowerShell scripting to automate tasks.
• Strong troubleshooting of Windows Update and Windows 11 issues.
• Familiarity with AI chat tools and AI agents for operations is a plus.

Responsibilities

• Test, validate, and deploy monthly and on-demand patches for Windows OS, drivers, BIOS, and apps using Intune, MCM, and PatchMyPC.
• Configure and manage Autopilot for device provisioning and enrollment.
• Define and manage security patching compliance via Intune and GPO.
• Monitor Windows update processes and troubleshoot issues from tenant and endpoints.
• Collaborate with security to remediate CVEs and implement action plans.
• Serve as senior escalation point for complex endpoint issues with cross-functional teams.
• Contribute to process improvements and future direction of endpoint management tech.
• Stay current with AI-enabled tools to enhance efficiency and security.
• Develop internal docs, KB articles, diagrams, and SOPs; support roadmap planning.

Skills

Intune patching

Autopilot

PowerShell scripting

Group Policy (GPO)

MCM/SCCM

AI tools (ChatGPT/C Claude)

Patch management

PatchMyPC

Windows Update troubleshooting

Security patching compliance

Tools

Intune

Autopilot

MCM/SCCM

PatchMyPC

PowerShell

Microsoft Graph API

Job description

**Job Title:** Configuration Management Systems Engineer, Windows Endpoint Patching**Location:** Mexico Center of Excellence (COE)**Summary**JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The ideal candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.**Key Responsibilities*** Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third-party applications using Intune (primary), MCM, and PatchMyPC.* Configure and manage Autopilot for device provisioning.* Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).* Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.* Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.* Act as a senior escalation point for complex endpoint issues, coordinating with internal support teams and external vendors to ensure timely resolution.* Provide input into process improvements and the future direction of endpoint management technologies.* Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.* Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long-term strategies.* Participate in a global, follow-the-sun support model to address critical system issues and perform scheduled maintenance.**Required Qualifications*** In-depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.* Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user-driven provisioning and pre-provisioning) for device enrollment.* Experience configuring and maintaining Autopilot using ESP, group tags, etc.* Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM, Intune, and Windows log files, from both the tenant consoles and endpoint devices.* Proficient in scripting with PowerShell to automate tasks and implement solutions.* Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.* Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.* Demonstrated experience with patch testing and application testing methodologies.* Experience with Microsoft Configuration Manager (MCM/SCCM).* Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.* Excellent technical, analytical, and problem-solving skills with the ability to manage multiple projects simultaneously in a fast-paced environment.* Strong communication skills for effective collaboration with global teams.* A reliable, self-motivated, and disciplined work ethic.**Preferred Qualifications*** Experience with application packaging and deployment techniques.* Knowledge of and experience with Microsoft Graph API.* Experience using AI Assistants to improve efficiency and simplify day-to-day tasks is preferred.* Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.* Experience with virtual desktop environments (e.g., AWS Workspaces).* Previous experience communicating directly with Executive Leadership.* Prior experience working within a global, distributed team structure.**Location:**On-site –Jalisco,MEX