Endpoint Engineer (SCCM and Intune)

Optum, a UnitedHealth Group Company; Metro Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Laptop Provided by Company

Medical Plan (HMO) from Day 1

Dental, Medical, Optical Reimburse*

Retirement Plan

Paid Time-Off Benefits

Annual Merit Increases

Job summary

Optum, a UnitedHealth Group Company, in the Philippines is seeking an experienced Endpoint Management Engineer to administer SCCM/MECM, Intune, and Workspace ONE UEM, ensure patching and compliance, manage OS deployments, and participate in incident management. The role emphasizes automation with PowerShell and AI-assisted workflows, driving improvements in reliability and performance.

The position requires deep hands-on experience with endpoint platforms, strong scripting skills, and

Qualifications

• 6+ years hands-on SCCM/MECM administration.
• 3+ years hands-on Microsoft Intune administration.
• Experience maintaining endpoint platform health and reliability.
• Strong experience with patching operations, ADRs, deployment rings, maintenance windows, and compliance reporting.
• Vulnerability remediation and non-compliant device resolution.

Responsibilities

• Administer and maintain SCCM/MECM, Intune, and Workspace ONE UEM platforms.
• Manage endpoint enrollment, configuration profiles, compliance policies, and deployments.
• Monitor platform health, availability, and performance.
• Ensure inventory accuracy and operational hygiene through health checks.
• Support coexistence of multiple platforms and minimize policy conflicts.
• Execute patching with ADRs, maintenance windows, and compliance reporting.
• Drive vulnerability remediation within required timelines.
• Assist OS deployments, task sequences, and application packaging.
• Troubleshoot deployment, client health, and policy issues.
• Develop PowerShell scripts for automation and runbooks.

Education

Bachelor’s Degree in Computer Science/IT/Engineering

ITIL Foundation Certification

Microsoft Endpoint Management certifications

Workspace ONE / Omnissa certifications

AI/tools experience for ops

Tools

SCCM/MECM

Microsoft Intune

Workspace ONE UEM

PowerShell

Job description

Job Responsibilities

Endpoint Management & Platform Operations

• Administer and maintain SCCM/MECM, Microsoft Intune, and Workspace ONE UEM platforms.

• Manage endpoint enrollment, configuration profiles, compliance policies, application deployments, and RBAC.

• Monitor platform health, availability, and operational performance.

• Ensure endpoint inventory accuracy and operational hygiene through routine health checks and validations.

• Support coexistence of multiple endpoint management platforms while minimizing policy conflicts.

Patching, Vulnerability Management & Compliance

• Execute software patching operations through SCCM, including ADRs, maintenance windows, deployment schedules, and compliance reporting.

• Monitor and improve patch compliance across enterprise endpoints.

• Drive vulnerability remediation activities and validate compliance within required timelines.

• Investigate and resolve non-compliant devices and deployment failures.

• Support compliance dashboards and operational reporting.

Application Lifecycle & OS Management

• Support operating system deployments, task sequences, feature updates, servicing, and in-place upgrades.

• Coordinate driver and BIOS packaging activities.

• Package and deploy applications using SCCM and Intune.

• Manage application dependencies, supersedence, detection methods, and deployment rings.

• Perform post-deployment validation and issue remediation.

Incident Management & Operational Excellence

• Troubleshoot endpoint deployment, client health, policy, and application issues.

• Participate in major incident bridges and war rooms to support rapid service restoration.

• Work within Incident, Problem, and Change Management processes.

• Prepare change documentation, risk assessments, validation plans, and implementation procedures.

• Drive SLA adherence and contribute to reducing Mean Time to Resolution (MTTR).

Automation & AI Adoption

• Develop PowerShell scripts for automation, compliance monitoring, and endpoint remediation.

• Create operational runbooks, procedures, and automation workflows.

• Identify opportunities to leverage AI tools for ticket summarization, log analysis, knowledge article generation, and operational efficiencies.

• Pilot AI and automation initiatives that improve reliability, speed, and user experience.

• Ensure AI adoption follows security, privacy, and data governance standards.

Required Qualifications

• 6+ years of hands‑on experience administering Microsoft SCCM/MECM.

• 3+ years of hands‑on experience administering Microsoft Intune.

• Experience managing endpoint platform health, availability, and operational reliability.

• Strong experience with:

  • SCCM patching operations

  • Automated Deployment Rules (ADR)

  • Deployment rings

  • Maintenance windows

  • Compliance reporting

  • Vulnerability remediation

• Experience supporting endpoint health monitoring and remediation activities.

• Strong PowerShell scripting and automation experience.

• Experience creating operational runbooks, scripts, and support documentation.

• Experience participating in major incident management and war room activities.

• Working knowledge of Incident, Problem, and Change Management processes.

• Excellent troubleshooting skills and ability to resolve complex endpoint management issues.

• Strong communication and stakeholder management skills.

• Ability to identify continuous improvement opportunities through automation and AI‑assisted workflows.

Core Technical Skills

• MECM / SCCM

  • Application deployment

  • Collections

  • Content distribution

  • Client health

  • Reporting

  • Boundaries

  • Software Updates

• Microsoft Intune

  • Device enrollment

  • Compliance policies

  • Configuration profiles

  • Win32 application deployment

  • RBAC

  • Troubleshooting

• Workspace ONE UEM

  • Profiles

  • Smart Groups

  • Compliance policies

  • Application distribution

  • Device troubleshooting

• Automation

  • PowerShell

  • Operational scripting

  • Endpoint remediation

Preferred Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or related field.

• ITIL Foundation Certification.

• Microsoft Endpoint Management certifications.

• Workspace ONE / Omnissa certifications or training.

• 2+ years of hands‑on Workspace ONE UEM administration experience.

• Experience using AI tools to improve operational efficiency and knowledge management.

Success Indicators

• High endpoint platform availability and health.

• Improved patch compliance and vulnerability remediation rates.

• Reduced repeat incidents through proactive remediation and root cause analysis.

• Increased automation adoption and operational efficiency.

• Consistent SLA achievement and reduced MTTR.

What we offer

• Laptop/Computer Provided by the Company

• Market Total Rewards Package

• Retirement Plan

• Medical Plan (HMO) from Day 1 of employment

• Dental, Medical, and Optical Reimbursements

• Life and Disability Insurance

• Paid Time‑Off Benefits

• Sick Leave Conversion

• Tuition Fee Reimbursement

• Employee Assistance Program (EAP)

• Annual Performance Based Merit Increases

• Employee Recognition

• Training and Staff Development

• Employee Referral Program

• Employee Volunteerism Opportunity

• All Mandatory Statutory Benefits
  

Who we are

• Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.

• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.

• This includes our over 25,000 employees in the Philippines. Elevate your career with a leading health care company while improving lives.