Senior Endpoint Engineer

EPAM Systems, Inc.; México; A distancia; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

EPAM Systems, Inc. in Mexico is seeking a Senior Endpoint Engineer to design, implement, and support end-user computing across the organization, with a focus on Azure Virtual Desktop and Microsoft Intune.

You will manage image creation, VM deployment, software patching, and Windows 11 provisioning using Intune Autopilot, while enforcing security configurations through Intune and GPOs. Collaboration with cross‑functional teams, strong patch management, SCCM/MECM experience, and excellent

Formación

• 3+ years designing Intune solutions and endpoint management.
• Experience with Windows 11, AD, and GPO management.
• Strong patch management including BIOS/firmware updates.
• Effective communication and teamwork in enterprise environments.

Responsabilidades

• Manage AVD environments, image creation, VM deployment, and performance monitoring.
• Develop automated software deployment and image update processes.
• Create and manage Intune policies for device compliance and security.
• Design and maintain Windows provisioning with Intune Autopilot.
• Manage Group Policy Objects and integrate with AD.
• Collaborate with cross-functional teams and document configurations.

Conocimientos

Azure Virtual Desktop

Microsoft Intune

Endpoint Protection

Group Policy

SCCM/MECM

Windows 11

Herramientas

SCCM/MECM

PowerShell

Active Directory

Descripción del empleo

We are seeking a Senior Endpoint Engineer to join our team.In this role, you will engineer, enhance, and support Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. You will leverage your technical expertise and operational discipline to ensure stable, secure, and efficient end-user computing across the organization.ResponsibilitiesDeliver technology and products according to the roadmap, ensuring timely and high-quality outcomesProvide expert advice, guidance, and direction to execute plans and procedures, supporting schedule attainment and adherence to product development processesServe as the last tier of support for operations and support teams, conducting root cause and preventative analysisAct as an escalation point for the Desktop Operations team and all matters related to End User Computing, with a focus on Endpoint Security Protection and application managementCollaborate with other Engineering teams to develop integrated solutionsManage the Azure Virtual Desktop (AVD) environment, including image creation, VM deployment, and performance monitoringDevelop automated solutions for deploying software packages, application patches, updates, and workstation imagesEngineer and support multiple Windows desktop imagesOversee the lifecycle management of global standard desktop and laptop modelsDesign and implement Microsoft Intune solutions to meet end user requirementsCreate and manage Intune policies for application deployment, device compliance, and security configurationsEnsure seamless integration with other Microsoft 365 servicesDesign and deploy Windows 11 provisioning processes using Intune Autopilot, configure Windows Update for Business policies, and maintain standardized deployment imagesDesign and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies, collaborating with the Active Directory teamImplement security best practices and compliance policies within Intune, monitor and respond to security incidents related to mobile devices and endpointsCreate detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settingsMaintain desktop images and modify SCCM task sequences as neededPackage, test, and deploy new applications as requiredMaintain and expand the existing Knowledge BaseCreate and update support documents to uphold high standards in End User Computing service deliveryRequirementsAt least 3 years of experience designing and implementing Microsoft Intune solutions and working as a system engineerDesktop engineering and support experience in an enterprise environmentProven expertise with Windows 11, Active Directory structure, and Group Policy managementExperience developing and testing software packages using InstallShield or similar toolsSkills in managing VDI environments, with preference for Azure Virtual DesktopAdvanced knowledge in Endpoint Protection EngineeringProficiency in MECM and Intune for endpoint managementStrong patch management skills, including bios and firmware updates, service pack upgrades, and application-based updatesBasic database administration experience, especially with SQL ServerEffective written and verbal communication skillsStrong organizational and problem-solving abilitiesExcellent teamwork skills and motivation for professional growthFluent English skills (written and spoken) at a B2+ level or higherWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.