Endpoint Engineer (SCCM and Intune)

Hammerjack Pty Ltd; Metro Manila; On-site; PHP 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Laptop provided by the company

Medical Plan (HMO) from Day 1

Dental, Medical, Optical Reimburse

Job summary

Optum in Metro Manila is seeking an experienced Endpoint Management Engineer to oversee SCCM/MECM, Intune, and Workspace ONE UEM administration. You will manage enrollment, configurations, compliance, and deployments while ensuring platform health and security governance.

The role emphasizes patching, vulnerability remediation, OS deployment, and incident management. You will also drive automation and AI-powered workflows to improve reliability, speed, and user satisfaction.

Qualifications

• 6+ years of hands-on experience administering Microsoft SCCM/MECM.
• 3+ years of hands-on experience administering Microsoft Intune.
• Experience managing endpoint platform health, availability, and operational reliability.
• Strong PowerShell scripting and automation experience.
• Experience participating in Incident, Problem, and Change Management processes.
• Excellent troubleshooting and stakeholder management skills.
• Ability to identify continuous improvement opportunities through automation and AI-assisted workflows.

Responsibilities

• Administer and maintain SCCM/MECM, Microsoft Intune, and Workspace ONE UEM platforms.
• Manage endpoint enrollment, configuration profiles, compliance policies, application deployments, and RBAC.
• Monitor platform health, availability, and operational performance.
• Ensure endpoint inventory accuracy and operational hygiene through routine health checks and validations.
• Support coexistence of multiple endpoint management platforms while minimizing policy conflicts.
• Execute software patching operations through SCCM, including ADRs, maintenance windows, deployment schedules, and compliance reporting.
• Monitor and improve patch compliance across enterprise endpoints.
• Drive vulnerability remediation activities and validate compliance within required timelines.
• Investigate and resolve non-compliant devices and deployment failures.
• Support compliance dashboards and operational reporting.
• Support operating system deployments, task sequences, feature updates, servicing, and in-place upgrades.
• Coordinate driver and BIOS packaging activities.
• Package and deploy applications using SCCM and Intune.
• Manage application dependencies, supersedence, detection methods, and deployment rings.
• Perform post-deployment validation and issue remediation.
• Troubleshoot endpoint deployment, client health, policy, and application issues.
• Participate in major incident bridges and war rooms to support rapid service restoration.
• Work within Incident, Problem, and Change Management processes.
• Prepare change documentation, risk assessments, validation plans, and implementation procedures.
• Drive SLA adherence and contribute to reducing Mean Time to Resolution (MTTR).
• Develop PowerShell scripts for automation, compliance monitoring, and endpoint remediation.
• Create operational runbooks, procedures, and automation workflows.
• Identify opportunities to leverage AI tools for ticket summarization, log analysis, knowledge article generation, and operational efficiencies.
• Pilot AI and automation initiatives that improve reliability, speed, and user experience.
• Ensure AI adoption follows security, privacy, and data governance standards.

Skills

SCCM/MECM

Intune

Workspace ONE UEM

PowerShell

Automation

Incident Management

RBAC

AI Opportunities

Education

Bachelor's Degree in CS/IT/Engineering

Tools

ADR

Automation Scripts

Job description

Job Responsibilities

Endpoint Management & Platform Operations

• Administer and maintain SCCM/MECM, Microsoft Intune, and Workspace ONE UEM platforms.
• Manage endpoint enrollment, configuration profiles, compliance policies, application deployments, and RBAC.
• Monitor platform health, availability, and operational performance.
• Ensure endpoint inventory accuracy and operational hygiene through routine health checks and validations.
• Support coexistence of multiple endpoint management platforms while minimizing policy conflicts.

Patching, Vulnerability Management & Compliance

• Execute software patching operations through SCCM, including ADRs, maintenance windows, deployment schedules, and compliance reporting.
• Monitor and improve patch compliance across enterprise endpoints.
• Drive vulnerability remediation activities and validate compliance within required timelines.
• Investigate and resolve non-compliant devices and deployment failures.
• Support compliance dashboards and operational reporting.

Application Lifecycle & OS Management

• Support operating system deployments, task sequences, feature updates, servicing, and in-place upgrades.
• Coordinate driver and BIOS packaging activities.
• Package and deploy applications using SCCM and Intune.
• Manage application dependencies, supersedence, detection methods, and deployment rings.
• Perform post-deployment validation and issue remediation.

Incident Management & Operational Excellence

• Troubleshoot endpoint deployment, client health, policy, and application issues.
• Participate in major incident bridges and war rooms to support rapid service restoration.
• Work within Incident, Problem, and Change Management processes.
• Prepare change documentation, risk assessments, validation plans, and implementation procedures.
• Drive SLA adherence and contribute to reducing Mean Time to Resolution (MTTR).

Automation & AI Adoption

• Develop PowerShell scripts for automation, compliance monitoring, and endpoint remediation.
• Create operational runbooks, procedures, and automation workflows.
• Identify opportunities to leverage AI tools for ticket summarization, log analysis, knowledge article generation, and operational efficiencies.
• Pilot AI and automation initiatives that improve reliability, speed, and user experience.
• Ensure AI adoption follows security, privacy, and data governance standards.

Required Qualifications

• 6+ years of hands-on experience administering Microsoft SCCM/MECM.
• 3+ years of hands-on experience administering Microsoft Intune.
• Experience managing endpoint platform health, availability, and operational reliability.
• Strong experience with:
• SCCM patching operations
• Automated Deployment Rules (ADR)
• Deployment rings
• Maintenance windows
• Compliance reporting
• Vulnerability remediation
• Experience supporting endpoint health monitoring and remediation activities.
• Strong PowerShell scripting and automation experience.
• Experience creating operational runbooks, scripts, and support documentation.
• Experience participating in major incident management and war room activities.
• Working knowledge of Incident, Problem, and Change Management processes.
• Excellent troubleshooting skills and ability to resolve complex endpoint management issues.
• Strong communication and stakeholder management skills.
• Ability to identify continuous improvement opportunities through automation and AI-assisted workflows.

Core Technical Skills

• MECM / SCCM
• Application deployment
• Collections
• Content distribution
• Client health
• Reporting
• Boundaries
• Software Updates
• Microsoft Intune
• Device enrollment
• Compliance policies
• Configuration profiles
• Win32 application deployment
• RBAC
• Troubleshooting
• Workspace ONE UEM
• Profiles
• Smart Groups
• Compliance policies
• Application distribution
• Device troubleshooting
• Automation
• PowerShell
• Operational scripting
• Endpoint remediation

Preferred Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related field.
• ITIL Foundation Certification.
• Microsoft Endpoint Management certifications.
• Workspace ONE / Omnissa certifications or training.
• 2+ years of hands-on Workspace ONE UEM administration experience.
• Experience using AI tools to improve operational efficiency and knowledge management.

Success Indicators

• High endpoint platform availability and health.
• Improved patch compliance and vulnerability remediation rates.
• Reduced repeat incidents through proactive remediation and root cause analysis.
• Increased automation adoption and operational efficiency.
• Consistent SLA achievement and reduced MTTR.

What we offer

• Laptop/Computer Provided by the Company
• Market Total Rewards Package
• Retirement Plan
• Medical Plan (HMO) from Day 1 of employment
• Dental, Medical, and Optical Reimbursements
• Life and Disability Insurance
• Paid Time-Off Benefits
• Sick Leave Conversion
• Tuition Fee Reimbursement
• Employee Assistance Program (EAP)
• Annual Performance Based Merit Increases
• Employee Recognition
• Training and Staff Development
• Employee Referral Program
• Employee Volunteerism Opportunity
• All Mandatory Statutory Benefits

WHO WE ARE:

• Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.
• UnitedHealth Group is a health care and well‑being company with a mission to help people live healthier lives and help make the health system work better for everyone.
• We’re a leading health solution and care delivery organization. Our work is complex, but our mission is simple: create a healthier world, with you at the center.
• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.
• Elevate your career with a leading health care company while improving lives.

Join us in evolving health care so everyone can have the opportunity to live their healthiest life. This is your opportunity to be part of a team that's dedicated to Caring. Connecting. Growing together.