EUC Lead

St Engineering; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ST Engineering seeks a Lead End User Computing (EUC) Engineer to drive the technical roadmap for its Windows and mobile endpoint estate. You will guide architecture decisions, own provisioning and OS lifecycle management, and raise automation standards across a large scale fleet.

You will work hands-on in Intune, SCCM, and PowerShell while planning multi-quarter workstreams and mentoring engineers. This role demands leadership and direct influence on end-user computing at scale.

Qualifications

• 7+ years in endpoint engineering / EUC, with ownership of Windows fleet end-to-end.
• Experience leading workstreams and mentoring engineers.
• Expert-level Microsoft Intune/SCCM administration across Windows and mobile.
• Hands-on Windows Autopilot experience at scale.
• Proven ownership of Windows OS upgrade/EOL migration programmes.

Responsibilities

• Own and maintain the technical roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management.
• Set engineering standards and drive consistency across the estate.
• Mentor junior and mid-level engineers and review their work.
• Lead design reviews and make architecture recommendations to EUC Manager.
• Lead operations for Windows Hello for Business and app protection policies.

Skills

Leadership

Intune/SCCM administration

PowerShell automation

Architecture & design

Mentoring

Endpoint provisioning

Zero-touch provisioning

Tools

Microsoft Intune

SCCM

Tanium

Entra ID

Graph API

Job description

We are looking for a Lead End User Computing (EUC) Engineer to act as the technical lead

for our Windows and mobile endpoint estate across a large, multi-business-unit

environment. You will own the engineering roadmap for endpoint provisioning, OS lifecycle,

encryption, and mobile management, setting the technical direction, raising the bar on

automation and standards and mentoring junior and mid-level engineers to deliver it.

This is a hands-on leadership role. You will still be deep in the Intune admin centre and

PowerShell, but you are also expected to plan multi-quarter workstreams, make architecture

and tooling decisions, and represent EUC engineering in design reviews and change

processes. You’ll be working at meaningful scale, a fleet of 17,000 endpoints across multiple

business units.

Key responsibilities

Technical leadership & roadmap

• Own and maintain the technical roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management.
• Set engineering standards, baselines, and best practices; drive consistency across the estate.
• Mentor and provide technical direction to junior and mid-level engineers; review their work and grow their capability.
• Lead design reviews, evaluate new tooling/approaches, and make architecture recommendations to the EUC Manager.

Endpoint provisioning & imaging

• Design and continuously improve zero-touch device provisioning using Windows Autopilot (Entra hybrid and Entra-joined).
• Own Autopilot profiles, configurations, deployment profiles, and dynamic grouping.
• Maintain provisioning quality, driver/firmware management, OEM relationships, and resolution of complex enrolment failures.

OS lifecycle & upgrades

• Plan and lead Windows feature and EOL upgrade campaigns across the fleet.
• Own update rings, Windows Update for Business policies, and rollout strategy.
• Diagnose and develop repeatable remediation for upgrade failures (in-place upgrade blocks, hardening conflicts, disk/component issues).
• Lead operations for Windows Hello for Business, LAPS, and application control
• Set strategy and standards for iOS and Android enrolment, configuration, and compliance via Intune (BYOD and corporate-owned).
• Own app protection / MAM policies, certificate and Wi‑Fi/VPN profiles, and mobile app deployment.

Job Requirements

• 7+ years in endpoint engineering / EUC, with a track record of owning a Windows fleet end-to-end at scale.
• Demonstrated experience leading workstreams and mentoring or technically guiding other engineers.
• Expert-level Microsoft Intune/SCCM administration across Windows and mobile.
• Deep, hands‑on Windows Autopilot experience in production at scale.
• Proven ownership of Windows OS upgrade / EOL migration programmes from planning through delivery.
• Strong command of BitLocker, Entra ID, Conditional Access, and Windows compliance.
• Tanium (or SCCM / ConfigMgr) for endpoint management and patching.
• Advanced PowerShell scripting; comfortable automating against the Microsoft Graph API.