Tools/Endpoint Systems Engineer II

Stewart Pakistan Private Limited; Lahore; On-site; PKR 2,500,000 - 4,000,000; Full time

Job summary

Stewart Pakistan Private Limited is seeking an experienced Endpoint Systems Engineer to shape and advance our enterprise endpoint management strategy across Windows, macOS, and iOS devices using SCCM/MECM, Intune, Autopilot, and related tools.

You will lead efforts to strengthen security, reliability, and automation, collaborating with NOC, Service Desk, and security teams to drive operational improvements and modernization.

Qualifications

• 6+ years of experience with Windows endpoint management, including SCCM/MECM, Intune, Intune co-management, and Autopilot, in enterprise environments.
• Strong experience with patching, compliance reporting, and endpoint security across hybrid on-premises and cloud environments.
• Experience with macOS and iOS device management.
• Experience with AI-assisted tools, PowerShell, automation, and scripting to improve IT operations.
• Experience developing runbooks and technical documentation.
• Experience working with enterprise ticketing systems to manage incidents, service requests, and changes.
• Strong communication and cross-functional collaboration skills.
• A proactive, organized approach to operational risk management and continuous improvement.

Responsibilities

• Administer and enhance SCCM/MECM, Intune, Autopilot, and monitoring platforms, including SCOM, Bomgar, and ControlUp.
• Shape and support hybrid on-premises and cloud-based endpoint environments that enable secure, reliable operations at scale.
• Design and implement operating system, application, and third-party patching strategies.
• Monitor patch compliance and deployment success using SCCM/MECM and SCOM.
• Support security compliance efforts while helping minimize end-user impact.
• Manage device enrollment, compliance policies, application deployment, and security baselines.
• Develop PowerShell scripts and automation workflows to reduce manual effort and improve operational efficiency.
• Identify and implement opportunities to automate repetitive tasks and modernize endpoint operations.
• Explore AI-assisted tools to enhance troubleshooting, support, and engineering productivity.
• Serve as a key escalation point for complex endpoint and infrastructure issues.
• Partner with NOC, Service Desk, security, and application teams to resolve issues, improve service delivery, and drive operational improvements.
• Work with vendors on troubleshooting, root cause analysis, and solution planning.
• Develop and maintain architectural diagrams, runbooks, and technical standards.
• Help promote team consistency and support onboarding for secondary staff.

Skills

Windows endpoint management

SCCM/MECM

Intune

Autopilot

Patching and compliance

PowerShell scripting

Automation

Communication

Cross-functional collaboration

Tools

SCOM

Bomgar

ControlUp

Azure

Job description

We are looking for an experienced Endpoint Systems Engineer to play a key role in shaping and advancing our enterprise endpoint management strategy. In this role, you will lead efforts that strengthen security, reliability, and automation across Windows, macOS, and iOS devices using SCCM/MECM, Intune, and related enterprise tools. This is an opportunity to make a visible impact through modern endpoint engineering, cross-functional collaboration, and continuous improvement.

KEY RESPONSIBILITIES

Platform Administration

• Administer and enhance SCCM/MECM, Intune, Autopilot, and monitoring platforms, including SCOM, Bomgar, and ControlUp.
• Help shape and support hybrid on-premises and cloud-based endpoint environments that enable secure, reliable operations at scale.

Patching and Compliance

• Design and implement operating system, application, and third-party patching strategies.
• Monitor patch compliance and deployment success using SCCM/MECM and SCOM.
• Support security compliance efforts while helping minimize end-user impact.

Device Management

• Support Windows, macOS, and iOS device management through Intune.
• Manage device enrollment, compliance policies, application deployment, and security baselines.

Automation and Optimization

• Develop PowerShell scripts and automation workflows to reduce manual effort and improve operational efficiency.
• Identify and implement opportunities to automate repetitive tasks and modernize endpoint operations.
• Explore AI-assisted tools to enhance troubleshooting, support, and engineering productivity.

Collaboration and Support

• Serve as a key escalation point for complex endpoint and infrastructure issues.
• Partner with NOC, Service Desk, security, and application teams to resolve issues, improve service delivery, and drive operational improvements.
• Work with vendors on troubleshooting, root cause analysis, and solution planning.

Documentation and Standards

• Develop and maintain architectural diagrams, runbooks, and technical standards.
• Help promote team consistency and support onboarding for secondary staff.

REQUIRED QUALIFICATIONS

• 6+ years of experience with Windows endpoint management, including SCCM/MECM, Intune, Intune co-management, and Autopilot, in enterprise environments.
• Strong experience with patching, compliance reporting, and endpoint security across hybrid on-premises and cloud environments.
• Experience with macOS and iOS device management.
• Experience with AI-assisted tools, PowerShell, automation, and scripting to improve IT operations.
• Experience developing runbooks and technical documentation.
• Experience working with enterprise ticketing systems to manage incidents, service requests, and changes.
• Strong communication and cross-functional collaboration skills.
• A proactive, organized approach to operational risk management and continuous improvement.

PREFERRED QUALIFICATIONS

• Experience with SCOM, Bomgar, or Control Up.
• Experience working with ServiceNow to manage incidents, service requests, and changes.
• Experience working in regulated environments.
• ITIL, SCCM/SCOM, or Azure certifications.