Hybrid Windows Endpoint Engineer

Marsh Agency; Kuala Lumpur; Hybrid; MYR 120,000 - 180,000; Full time

Job summary

Marsh is seeking a Windows Endpoint Engineer to design, build and operate a global Windows endpoint platform supporting roughly 95,000 colleagues. You will work across Intune, Entra ID, Autopilot, and cloud services, shaping modern Windows management and secure deployment practices.

You will lead automation, configuration, and security controls, collaborating with security, identity and regional teams. This role requires strong documentation and a pragmatic, collaborative mindset in a hybrid

Qualifications

• Experience engineering Windows endpoints in a large enterprise environment.
• Hands-on with Microsoft Intune, Entra ID, Windows Autopilot and cloud config/compliance.
• Experience with Windows deployment, servicing, drivers and firmware.
• Strong knowledge of deploying and updating Microsoft 365 Apps and enterprise Windows apps.
• PowerShell automation and API/JSON/XML/CSV skills.
• Understanding endpoint security controls (BitLocker, Secure Boot, Defender).
• Able to translate requirements into technical designs and docs.

Responsibilities

• Engineer and maintain the enterprise Windows endpoint platform across devices.
• Design and support provisioning and lifecycle workflows using Intune, Entra ID, and Windows Autopilot.
• Manage Windows configuration, updates, servicing rings, drivers, BIOS and firmware.
• Improve packaging, deployment, updates and remediation with application owners.
• Implement endpoint security and compliance capabilities and baselines.
• Automate workflows with PowerShell and integrate with platforms like ServiceNow.
• Analyze telemetry to identify trends and improve device health and reliability.
• Lead incident investigations and coordinate with Microsoft and vendors as needed.
• Create architecture docs, standards and handover materials.
• Participate in peer reviews and continual improvement of global services.

Skills

Windows Endpoint

Intune

Entra ID

Autopilot

PowerShell

Graph API

ServiceNow

Endpoint Security

Documentation

Collaboration

Tools

Intune

Entra ID

Windows Autopilot

Microsoft Graph

ServiceNow

BitLocker

Defender

Job description

Marsh is seeking a Windows Endpoint Engineer to design, build and operate a global Windows endpoint platform supporting roughly 95,000 colleagues. You will work across Intune, Entra ID, Autopilot, and cloud services, shaping modern Windows management and secure deployment practices.

You will lead automation, configuration, and security controls, collaborating with security, identity and regional teams. This role requires strong documentation and a pragmatic, collaborative mindset in a hybrid