Endpoint Engineer (SCCM/MECM/Intune)

Optum, a UnitedHealth Group Company; Metro Manila; On-site; PHP 900,000 - 1,700,000; Full time

Benefits offered by this job

Laptop provided by the company

Medical plan (HMO) from Day 1

Retirement plan

Paid Time-Off benefits

Employee Assistance Program

Job summary

Optum, a UnitedHealth Group Company, in Metro Manila, is seeking an expert for Endpoint Management to administer MECM/SCCM, Intune, and Workspace ONE UEM. You will manage device enrollment, configurations, RBAC, and patching across enterprise endpoints.

You will also drive vulnerability remediation, OS/app lifecycle activities, incident handling, and automation using PowerShell with AI-assisted workflows to enhance reliability and security.

Qualifications

• 6+ years of hands-on SCCM/MECM administration.
• ,
• 3+ years of hands-on Intune administration.
• Experience maintaining endpoint platform health and reliability.
• Experience with patching operations, ADRs, and maintenance windows.
• Experience with vulnerability remediation and compliance reporting.
• Strong scripting and automation capabilities in PowerShell.

Responsibilities

• Administer and maintain SCCM/MECM, Intune, and Workspace ONE UEM platforms.
• Monitor platform health and operational performance; ensure RBAC and policy compliance.
• Manage endpoint enrollment, configurations, and application deployments.
• Drive patching, vulnerability remediation, and compliance reporting.
• Develop automation scripts and AI-enabled workflows to improve efficiency.

Skills

SCCM/MECM administration

Intune administration

Endpoint health management

PowerShell scripting

Automation & AI awareness

RBAC & policy management

Education

Bachelor’s degree in IT or related field

Tools

PowerShell

SCCM

Intune

Workspace ONE

Job description

Job Responsibilities

Endpoint Management & Platform Operations

• Administer and maintain SCCM/MECM, Microsoft Intune, and Workspace ONE UEM platforms.

• Manage endpoint enrollment, configuration profiles, compliance policies, application deployments, and RBAC.

• Monitor platform health, availability, and operational performance.

• Ensure endpoint inventory accuracy and operational hygiene through routine health checks and validations.

• Support coexistence of multiple endpoint management platforms while minimizing policy conflicts.

Patching, Vulnerability Management & Compliance

• Execute software patching operations through SCCM, including ADRs, maintenance windows, deployment schedules, and compliance reporting.

• Monitor and improve patch compliance across enterprise endpoints.

• Drive vulnerability remediation activities and validate compliance within required timelines.

• Investigate and resolve non-compliant devices and deployment failures.

• Support compliance dashboards and operational reporting.

Application Lifecycle & OS Management

• Support operating system deployments, task sequences, feature updates, servicing, and in-place upgrades.

• Coordinate driver and BIOS packaging activities.

• Package and deploy applications using SCCM and Intune.

• Manage application dependencies, supersedence, detection methods, and deployment rings.

• Perform post-deployment validation and issue remediation.

Incident Management & Operational Excellence

• Troubleshoot endpoint deployment, client health, policy, and application issues.

• Participate in major incident bridges and war rooms to support rapid service restoration.

• Work within Incident, Problem, and Change Management processes.

• Prepare change documentation, risk assessments, validation plans, and implementation procedures.

• Drive SLA adherence and contribute to reducing Mean Time to Resolution (MTTR).

Automation & AI Adoption

• Develop PowerShell scripts for automation, compliance monitoring, and endpoint remediation.

• Create operational runbooks, procedures, and automation workflows.

• Identify opportunities to leverage AI tools for ticket summarization, log analysis, knowledge article generation, and operational efficiencies.

• Pilot AI and automation initiatives that improve reliability, speed, and user experience.

• Ensure AI adoption follows security, privacy, and data governance standards.

Required Qualifications

• 6+ years of hands-on experience administering Microsoft SCCM/MECM.

• 3+ years of hands‑on experience administering Microsoft Intune.

• Experience managing endpoint platform health, availability, and operational reliability.

• Strong experience with:

  • SCCM patching operations

  • Automated Deployment Rules (ADR)

  • Deployment rings

  • Maintenance windows

  • Compliance reporting

  • Vulnerability remediation

• Experience supporting endpoint health monitoring and remediation activities.

• Strong PowerShell scripting and automation experience.

• Experience creating operational runbooks, scripts, and support documentation.

• Experience participating in major incident management and war room activities.

• Working knowledge of Incident, Problem, and Change Management processes.

• Excellent troubleshooting skills and ability to resolve complex endpoint management issues.

• Strong communication and stakeholder management skills.

• Ability to identify continuous improvement opportunities through automation and AI-assisted workflows.

Core Technical Skills

• MECM / SCCM

  • Application deployment

  • Collections

  • Content distribution

  • Client health

  • Reporting

  • Boundaries

  • Software Updates

• Microsoft Intune

  • Device enrollment

  • Compliance policies

  • Configuration profiles

  • Win32 application deployment

  • RBAC

  • Troubleshooting

• Workspace ONE UEM

  • Profiles

  • Smart Groups

  • Compliance policies

  • Application distribution

  • Device troubleshooting

• Automation

  • PowerShell

  • Operational scripting

  • Endpoint remediation

Preferred Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or related field.

• ITIL Foundation Certification.

• Microsoft Endpoint Management certifications.

• Workspace ONE / Omnissa certifications or training.

• 2+ years of hands‑on Workspace ONE UEM administration experience.

• Experience using AI tools to improve operational efficiency and knowledge management.

Success Indicators

• High endpoint platform availability and health.

• Improved patch compliance and vulnerability remediation rates.

• Reduced repeat incidents through proactive remediation and root cause analysis.

• Increased automation adoption and operational efficiency.

• Consistent SLA achievement and reduced MTTR.

What we offer

• Laptop/Computer Provided by the Company

• Market Total Rewards Package

• Retirement Plan

• Medical Plan (HMO) from Day 1 of employment

• Dental, Medical, and Optical Reimbursements

• Life and Disability Insurance

• Paid Time-Off Benefits

• Sick Leave Conversion

• Tuition Fee Reimbursement

• Employee Assistance Program (EAP)

• Annual Performance Based Merit Increases

• Employee Recognition

• Training and Staff Development

• Employee Referral Program

• Employee Volunteerism Opportunity

• All Mandatory Statutory Benefits
  

Who we are

• Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.

• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.

• This includes our over 25,000 employees in the Philippines. Elevate your career with a leading health care company while improving lives.