Senior Endpoint Engineer (ConfigMgr and Intune)

SGI; Województwo mazowieckie; Remote; PLN 393,000 - 524,000; Full time

Job summary

SGI is seeking a Senior Endpoint Engineer for a remote Europe project to transform a large Windows estate to Intune. You will own co-management, migration orchestration, rollback planning, and Autopilot deployment across 29,000 devices as part of a major Digital Workplace transformation.

The role is hands-on, requiring a deep expertise in SCCM/Intune, PowerShell, and Microsoft Graph. You will work with a Senior Intune Architect and deliver migration waves and runbooks, ensuring security and

Qualifications

• 7+ years of hands-on SCCM / ConfigMgr engineering experience in enterprise environments with 10,000+ managed devices.
• Proven experience delivering large-scale Windows migration programmes with readiness, deployment waves, and runbooks.
• Strong hands-on experience with Intune, Autopilot, PowerShell, and enterprise automation.

Responsibilities

• Configure and manage SCCM/Intune co-management, pilot collections, workload transitions, and Cloud Management Gateway.
• Build, test, and support Windows 11 deployment task sequences and Autopilot hand-off.
• Package and deploy Win32 apps with dependencies and certificates; validate readiness.
• Develop migration orchestration using PowerShell and Microsoft Graph; manage device waves.
• Design, test and execute rollback procedures for migration stages.
• Perform reconciliation across AD, Entra ID, Intune and SCCM post-migration.
• Produce operational documentation, runbooks, and handover materials.

Skills

SCCM / ConfigMgr

Intune

PowerShell

Microsoft Graph

Entra ID

OSD Task Sequences

Tools

SCCM / MECM / ConfigMgr

Windows Autopilot

AutoPilot / Intune packaging

Job description

Location: Remote within Europe (CET working hours)
Start: ASAP
Contract: Initial 6-month contract with potential extension

About the Role
We are looking for a highly experienced Senior Endpoint Engineer to support a large-scale Digital Workplace transformation programme.

The programme is moving a global Windows estate of approximately 29,000 devices from on-premises management to Microsoft Intune.

The project has two key objectives:

Transition production devices from Group Policy and SCCM to Intune management through co-management, with orchestration, validation, and rollback processes fully tested before production rollout.

Deliver and operationalise Windows Autopilot provisioning, ensuring it becomes the standard method for building and deploying Windows devices, including Windows Hello for Business, compliance, and security services from first sign-in.

This is a hands-on delivery role. You will design, build, test, document, troubleshoot, and deploy solutions. You will work closely with a Senior Intune Architect while owning the technical delivery of co-management, migration orchestration, rollback processes, task sequences, and application packaging.

Key Responsibilities

• Configure and manage SCCM/Intune co-management, including pilot collections, workload transitions, client settings, and Cloud Management Gateway implementation.
• Build, test, and support Windows 11 deployment task sequences, including BIOS-to-UEFI conversion, firmware management, ConfigMgr client removal, and Autopilot hand-off.
• Package and deploy Intune Win32 applications, including dependency chains, requirement rules, certificate readiness validation, VPN clients, security tooling, and endpoint management components.
• Build and maintain migration orchestration solutions using PowerShell and Microsoft Graph, including device wave management, Entra ID group automation, SCCM collection management, and rollout runbooks.
• Design, test, and execute rollback procedures for all migration stages.
• Perform reconciliation across Active Directory, Entra ID, Intune, and SCCM environments following migration waves.
• Support pilot deployments, production migrations, and hypercare activities.
• Validate Delivery Optimization and Connected Cache performance for bandwidth-constrained environments.
• Produce operational documentation, SOPs, runbooks, knowledge articles, readiness reports, and handover documentation.

Mandatory Requirements Candidates must demonstrate:

• 7+ years of hands-on SCCM / ConfigMgr engineering experience in enterprise environments with 10,000+ managed devices.
• Proven experience delivering large-scale Windows migration programmes, including readiness assessments, deployment waves, rollback planning, hypercare support, and operational runbooks.
• Experience implementing and supporting SCCM/Intune co-management in production environments.
• Experience troubleshooting workload transitions and client-side configuration issues.
• Strong expertise building OSD task sequences, including Windows 11 deployments, BIOS-to-UEFI conversion, driver management, and firmware deployment.
• Hands-on experience with Intune Win32 application packaging, dependency management, requirement rules, and enterprise application deployment.
• Advanced PowerShell scripting skills.
• Strong experience using Microsoft Graphacross Entra ID, Intune, and Autopilot environments.
• Experience producing operational documentation and transitioning solutions into support teams.

This role is not suitable for candidates:

• Whose SCCM experience is primarily operations, support, or BAU administration.
• Whose largest supported environment was under 10,000 endpoints.
• Without proven experience delivering large-scale endpoint migration or transformation programmes.
• Without strong hands-on experience in Intune, Autopilot, PowerShell, and enterprise-scale automation.

Nice to Have

• Windows Autopilot Hybrid Join troubleshooting.
• Lenovo firmware management via WMI.
• PatchMyPC.
• KQL and/or Power BI reporting.
• Experience working in regulated environments.
• Microsoft MD-102 certification.

Key Technologies Microsoft Intune, SCCM / MECM / ConfigMgr, Windows 11, Windows Autopilot, Microsoft Graph, PowerShell, Entra ID, OSD Task Sequences, Win32 Application Packaging, Co-Management, Cloud Management Gateway, Active Directory.

By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
Source Group International Ltd is acting as an Employment Business in relation to this vacancy