Endpoint Management Engineer

Richemont; Moscavide; On-site; EUR 60,000 - 90,000; Full time

Job summary

Richemont in Lisbon, Portugal, is seeking an Endpoint Management Engineer to design, build, modernize, and operate Windows endpoint management solutions at scale. You will focus on Windows 11, Microsoft Intune, Windows Autopilot, automation, endpoint security, and performance optimization.

The role emphasizes modern endpoint management across corporate, retail, and contact center environments, delivering secure, automated, and reliable workplace solutions.

Qualifications

• Extensive experience with Windows endpoint management in large enterprise environments.
• Expertise in Windows 11, Intune, Autopilot and patch management.
• Strong scripting with PowerShell.
• Experience with security baselines and endpoint hardening.
• Familiarity with ITIL and Agile practices.

Responsibilities

• Engineer and maintain Windows 11 endpoint configurations and policies.
• Design Autopilot provisioning, deployment, and device lifecycle management.
• Migrate from GPO to cloud-based management (Intune).
• Manage Windows updates, patching, and deployments.
• Collaborate with Security teams and other Endpoint Engineering teams.
• Provide L3 escalations and problem management.
• Develop automation scripts and CI/CD workflows.

Skills

Automation focus

Ownership

Documentation

English communication

Tools

Microsoft Intune

Windows Autopilot

PowerShell

Tanium

Cortex XDR

Active Directory

Entra ID

Microsoft Graph API

Job description

About the Role

The Endpoint Management Engineer designs, builds, modernizes, and operates Windows endpoint management solutions in a large-scale, global enterprise environment.

The role primarily focuses on Windows 11, Microsoft Intune, Windows Autopilot, automation, endpoint security, and performance optimization.

The engineer drives the transition toward modern endpoint management, delivering secure, reliable, automated, and high‑performing workplace solutions across corporate, manufacturing, retail, and contact center environments.

This is an engineering-focused role, not a traditional desktop support position.

Key Responsibilities

Windows Endpoint Engineering & Microsoft Intune

• Engineer and maintain Windows 11 endpoint configurations, policies, and security baselines using Microsoft Intune.
• Design and optimize Windows Autopilot provisioning, deployment, and device lifecycle management.
• Drive the transition from legacy Group Policy Objects (GPO) toward modern cloud-based management.
• Manage Windows updates, patching, application deployments, compliance policies, and configuration profiles.
• Troubleshoot complex Windows, Intune, Entra ID, and hybrid identity integration issues.

Endpoint Performance, Security & Reliability

• Proactively identify and resolve Windows performance issues affecting boot time, application responsiveness, and overall user experience.
• Leverage endpoint telemetry and troubleshooting tools to improve platform stability and reliability.
• Collaborate with Security teams to implement endpoint hardening, security baselines, and compliance requirements.
• Use platforms such as Tanium and Palo Alto Cortex XDR for endpoint visibility, troubleshooting, and remediation.
• Drive root cause analysis and permanent resolution of recurring technical issues.

Automation & Continuous Improvement

• Develop and maintain scripts to automate provisioning, configuration, remediation, and operational activities.
• Integrate Microsoft Graph API and other enterprise APIs to automate endpoint management activities.
• Contribute to the adoption of Infrastructure-as-Code, Git‑based workflows, and CI/CD practices.
• Maintain technical documentation, reusable scripts, and engineering standards.

Engineering Delivery & Collaboration

• Deliver engineering initiatives and platform improvements through Agile practices using Jira.
• Collaborate with Security, Identity, Networking, Workplace, and other Endpoint Engineering teams.
• Support complex L3 escalations and contribute to problem management and permanent fixes.
• Apply ITIL practices for incident, problem, and change management while maintaining an engineering‑first approach.

Required Qualifications

Windows & Microsoft Intune Expertise

• Strong hands‑on experience engineering and managing Windows endpoints in large‑scale enterprise environments.
• Advanced knowledge of Windows 11 architecture, configuration, troubleshooting, and performance optimization.
• Proven expertise with Microsoft Intune, including:
  • Device enrollment and Windows Autopilot
  • Configuration profiles and security baselines
  • Windows Update for Business and patch management
  • Compliance policies and remediation scripts
• Solid understanding of Active Directory, Microsoft Entra ID, hybrid identity, and GPO‑to‑Intune migration.
• Advanced PowerShell scripting skills and experience automating Windows administration.
• Strong troubleshooting capabilities across Windows OS, authentication, networking, security, and application performance.
• Experience working with enterprise endpoint security and management solutions.

Competencies & Soft Skills

• Strong engineering mindset with a focus on automation, standardization, and reliability.
• Ability to challenge legacy practices and propose practical improvements.
• Strong ownership, accountability, and documentation habits.
• Excellent English communication skills, both written and verbal.

Nice to have

Experience in the following areas will significantly strengthen a candidate's profile but is not mandatory:

• Cross‑Platform Endpoint Management.
• Virtualization, Browser & Secure Access.
• DevOps, Automation & Cloud.
• Endpoint Security & Observability.