Windows Endpoint Engineering

Marsh; Ciudad de México; Hybrid; MXN 900,000 - 1,200,000; Full time

Job summary

Marsh in Mexico City is seeking a Windows Endpoint Engineer to join our hybrid team. You will manage the enterprise Windows endpoint platform across devices, deployment, security, and automation, working with Intune, Entra ID, Autopilot and PowerShell.

This role requires three office days per week and close collaboration with security, identity, network and service teams. You will translate business needs into technical designs, create roadmaps and deliver reliable, user-focused endpoint

Qualifications

• 5+ years of experience in Windows Endpoint support.
• Strong experience managing Windows 11 endpoints in a large enterprise.
• Hands-on experience with Intune, Entra ID, Windows Autopilot and cloud-based Windows configuration and compliance.

Responsibilities

• Engineer and maintain the enterprise Windows endpoint platform, including laptops, desktops, virtual endpoints and specialist device configurations.
• Design provisioning and lifecycle workflows using Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only device scenarios.
• Manage Windows configuration, feature updates, quality updates, servicing rings, drivers, BIOS, firmware, UEFI and supporting hardware standards.
• Engineer and improve application packaging, deployment, update and remediation processes, working with application owners to reduce compatibility and colleague-experience issues.
• Implement and maintain endpoint security and compliance capabilities, including BitLocker, Secure Boot, Defender controls, Windows Hello for Business and security baselines.
• Use PowerShell, Microsoft Graph and workflow automation to remove manual effort, improve control and integrate endpoint services with platforms such as ServiceNow.
• Use endpoint telemetry and digital employee experience data to identify trends, assess change impact and proactively improve device health, performance and reliability.
• Lead technical investigation and root-cause analysis for complex tier III incidents, engaging Microsoft and other technology vendors where required.
• Translate business, colleague, security and operational requirements into technical designs, implementation plans, testing approaches and production acceptance criteria.
• Create and maintain roadmaps, standards, engineering guides, release documentation, support knowledge and operational handover materials.
• Contribute to peer reviews, technical governance, proof-of-concept activity and continual improvement across the global endpoint engineering service.

Skills

Windows endpoint management

PowerShell automation

Intune expertise

Entra ID

Windows Autopilot

Microsoft Graph

Endpoint security

Tools

Microsoft Intune

Entra ID

Windows Autopilot

PowerShell

Microsoft Graph

Job description

Company

Marsh

Description:

Windows Endpoint Engineering

We are seeking a Windows Endpoint Engineering to join our team at Marsh. This role will be based in Mexico City. This is a hybrid role that has a requirement of working at least three days a week in the office. As a Windows Endpoint Engineering, you will work across modern device management, Windows deployment and servicing, application delivery, endpoint security and compliance, hardware lifecycle, automation and digital employee experience. You will collaborate with security, identity, network, application, service management and regional support teams to deliver reliable, secure and user-focused solutions.

We will count on you to :

• Engineer and maintain the enterprise Windows endpoint platform, including laptops, desktops, virtual endpoints and specialist device configurations.
• Design and support modern provisioning and lifecycle workflows using Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only device scenarios.
• Manage Windows configuration, feature updates, quality updates, servicing rings, drivers, BIOS, firmware, UEFI and supporting hardware standards.
• Engineer and improve application packaging, deployment, update and remediation processes, working with application owners to reduce compatibility and colleague-experience issues.
• Implement and maintain endpoint security and compliance capabilities, including BitLocker, Secure Boot, Defender controls, Windows Hello for Business and security baselines.
• Use PowerShell, Microsoft Graph and workflow automation to remove manual effort, improve control and integrate endpoint services with platforms such as ServiceNow.
• Use endpoint telemetry and digital employee experience data to identify trends, assess change impact and proactively improve device health, performance and reliability.
• Lead technical investigation and root-cause analysis for complex tier III incidents, engaging Microsoft and other technology vendors where required.
• Translate business, colleague, security and operational requirements into technical designs, implementation plans, testing approaches and production acceptance criteria.
• Create and maintain roadmaps, standards, engineering guides, release documentation, support knowledge and operational handover materials.
• Contribute to peer reviews, technical governance, proof-of-concept activity and continual improvement across the global endpoint engineering service.

What you need to have :

• 5 + years of experience working in Window Endpoint support.
• Strong experience of engineering and supporting Windows 11 endpoints in a large, distributed enterprise environment.
• Hands‑on experience with Microsoft Intune, Entra ID, Windows Autopilot and cloud-based Windows configuration and compliance.
• Experience with Windows deployment, servicing, recovery and troubleshooting, including feature updates, quality updates, drivers and firmware.
• Strong knowledge of application deployment, update management and compatibility troubleshooting for Microsoft 365 Apps and enterprise Windows applications.
• Practical PowerShell automation skills and experience working with APIs, Microsoft Graph or structured data formats such as JSON, XML and CSV.
• Good understanding of endpoint security, identity, compliance and access controls, including BitLocker, Secure Boot and Windows Hello for Business.
• Ability to analyse complex technical problems, communicate clearly with technical and non-technical stakeholders, and produce high-quality engineering documentation.

Why join our team :

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.