Senior Endpoint Engineer (ConfigMgr and Intune)

Source Group International; Województwo mazowieckie; Remote; PLN 421,000 - 572,000; Full time

Job summary

Source Group International is seeking a Senior Endpoint Engineer for a remote Europe project transforming a large Windows estate to Intune. You will drive co-management, Autopilot provisioning and migration orchestration, delivering robust rollback, task sequences and application packaging.

You will work hands-on with SCCM/Intune, PowerShell scripting, and Microsoft Graph while collaborating with an architect to ensure production-grade delivery and knowledge transfer.

Qualifications

• 7+ years hands-on SCCM/ConfigMgr engineering in large enterprises.
• Proven experience delivering large-scale Windows migration programmes.
• Experience implementing SCCM/Intune co-management in production environments.
• Strong troubleshooting of workload transitions and client config issues.
• Expertise in OSD task sequences for Windows 11 deployments and BIOS-UEFI conversion.
• Hands-on Intune Win32 packaging, dependencies and deployments.

Responsibilities

• Configure and manage SCCM/Intune co-management including pilot workloads.
• Develop and support Windows 11 deployment task sequences and Autopilot hand-off.
• Package and deploy Win32 apps with dependency chains and rules.
• Build migration orchestration using PowerShell and Microsoft Graph.
• Design and test rollback procedures for migration waves.
• Perform reconciliation across AD, Entra ID, Intune and SCCM.
• Support pilot deployments, production migrations and hypercare.

Skills

SCCM/ConfigMgr engineering

Intune

PowerShell scripting

Microsoft Graph

OSD task sequences

Autopilot

Entra ID

Active Directory

Tools

ConfigMgr

Win32 packaging

Cloud Management Gateway

Job description

Location: Remote within Europe (CET working hours)
Start: ASAP
Contract: Initial 6-month contract with potential extension

About the Role

We are looking for a highly experienced Senior Endpoint Engineer to support a large-scale Digital Workplace transformation programme.

The programme is moving a global Windows estate of approximately 29,000 devices from on-premises management to Microsoft Intune.

The project has two key objectives:

1. Transition production devices from Group Policy and SCCM to Intune management through co-management, with orchestration, validation, and rollback processes fully tested before production rollout.
2. Deliver and operationalise Windows Autopilot provisioning, ensuring it becomes the standard method for building and deploying Windows devices, including Windows Hello for Business, compliance, and security services from first sign-in.

This is a hands-on delivery role. You will design, build, test, document, troubleshoot, and deploy solutions. You will work closely with a Senior Intune Architect while owning the technical delivery of co-management, migration orchestration, rollback processes, task sequences, and application packaging.

Key Responsibilities

• Configure and manage SCCM/Intune co-management, including pilot collections, workload transitions, client settings, and Cloud Management Gateway implementation.
• Build, test, and support Windows 11 deployment task sequences, including BIOS-to-UEFI conversion, firmware management, ConfigMgr client removal, and Autopilot hand-off.
• Package and deploy Intune Win32 applications, including dependency chains, requirement rules, certificate readiness validation, VPN clients, security tooling, and endpoint management components.
• Build and maintain migration orchestration solutions using PowerShell and Microsoft Graph, including device wave management, Entra ID group automation, SCCM collection management, and rollout runbooks.
• Design, test, and execute rollback procedures for all migration stages.
• Perform reconciliation across Active Directory, Entra ID, Intune, and SCCM environments following migration waves.
• Support pilot deployments, production migrations, and hypercare activities.
• Validate Delivery Optimization and Connected Cache performance for bandwidth-constrained environments.
• Produce operational documentation, SOPs, runbooks, knowledge articles, readiness reports, and handover documentation.

Mandatory Requirements Candidates must demonstrate:

• 7+ years of hands‑on SCCM / ConfigMgr engineering experience in enterprise environments with 10,000+ managed devices.
• Proven experience delivering large‑scale Windows migration programmes, including readiness assessments, deployment waves, rollback planning, hypercare support, and operational runbooks.
• Experience implementing and supporting SCCM/Intune co‑management in production environments.
• Experience troubleshooting workload transitions and client‑side configuration issues.
• Strong expertise building OSD task sequences, including Windows 11 deployments, BIOS‑to‑UEFI conversion, driver management, and firmware deployment.
• Hands‑on experience with Intune Win32 application packaging, dependency management, requirement rules, and enterprise application deployment.
• Advanced PowerShell scripting skills.
• Strong experience using Microsoft Graph across Entra ID, Intune, and Autopilot environments.
• Experience producing operational documentation and transitioning solutions into support teams.

This role is not suitable for candidates:

• Whose SCCM experience is primarily operations, support, or BAU administration.
• Whose largest supported environment was under 10,000 endpoints.
• Without proven experience delivering large‑scale endpoint migration or transformation programmes.
• Without strong hands‑on experience in Intune, Autopilot, PowerShell, and enterprise‑scale automation.

Nice to Have

• Windows Autopilot Hybrid Join troubleshooting.
• Lenovo firmware management via WMI.
• PatchMyPC.
• KQL and/or Power BI reporting.
• Experience working in regulated environments.
• Microsoft MD-102 certification.

Key Technologies

Microsoft Intune, SCCM / MECM / ConfigMgr, Windows 11, Windows Autopilot, Microsoft Graph, PowerShell, Entra ID, OSD Task Sequences, Win32 Application Packaging, Co‑Management, Cloud Management Gateway, Active Directory.

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.