Lead Endpoint Engineer

KERRY CONSULTING PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting PTE. LTD. is seeking a Lead Endpoint Engineer in Singapore to own a large-scale Windows and mobile endpoint environment. This hands-on technical leadership role drives the EUC roadmap, automations, and security across 15,000+ endpoints.

You will combine architecture, technical decision-making and mentoring, delivering end-to-end endpoint initiatives with a focus on Intune, Autopilot, SCCM/ConfigMgr and advanced PowerShell automation.

Qualifications

• 7+ years of endpoint engineering or EUC experience.
• Experience owning a large-scale Windows endpoint environment.
• Hands-on expertise with Microsoft Intune and SCCM/ConfigMgr.
• Experience implementing Windows Autopilot at scale.
• Knowledge of Entra ID, Conditional Access and BitLocker.
• Advanced PowerShell scripting and Microsoft Graph API automation.
• Certifications such as MD-102/MS-102/SC-300/SC-200 advantageous.

Responsibilities

• Set technical direction and engineering standards for the endpoint environment.
• Own roadmaps for device provisioning, Windows lifecycle, encryption, patching, and MDM.
• Lead Windows Autopilot design across Entra-joined and hybrid environments.
• Maintain Intune configurations, deployment profiles, update policies, drivers, firmware, remediation.
• Plan Windows feature upgrades and end-of-life migrations; manage Windows Update for Business and Windows Hello.
• Establish Intune standards for iOS and Android BYOD and corporate devices.
• Mentor junior and mid-level engineers; focus on automation via PowerShell and Graph API.

Skills

Intune

PowerShell

Microsoft Graph API

Endpoint architecture

Mentoring

Tools

SCCM/ConfigMgr

Windows Autopilot

Entra ID

Tanium

Job description

Overview

A leading organization is hiring a Lead Endpoint Engineer in Singapore to take technical ownership of a large-scale Windows and mobile endpoint environment. This is a hands-on technical leadership role covering more than 15,000 endpoints, with responsibility for the EUC engineering roadmap, Microsoft Intune, Windows Autopilot, SCCM/ConfigMgr, endpoint security, OS lifecycle management, and automation. The role combines deep engineering work with architecture, technical decision-making, and mentoring of other engineers.

Responsibilities

You will set the technical direction and engineering standards for the endpoint environment, owning the roadmap across device provisioning, Windows lifecycle, encryption, patching, and mobile device management. You will lead the design and continuous improvement of Windows Autopilot across Entra-joined and hybrid environments, while maintaining Intune configurations, deployment profiles, update policies, drivers, firmware, and remediation processes.

You will also plan and lead Windows feature upgrades and end-of-life migration programs, with responsibility for Windows Update for Business, Windows Hello for Business, LAPS, BitLocker, application control, and endpoint compliance. Across iOS and Android, you will establish Intune standards for corporate and BYOD devices, including MAM/app protection, certificates, Wi-Fi/VPN profiles, and application deployment.

Beyond day-to-day engineering, you will lead technical workstreams, contribute to architecture and design reviews, evaluate tooling, and mentor junior and mid-level engineers. Automation will be a key focus, using PowerShell and Microsoft Graph API to improve consistency, scalability, and operational efficiency.

Requirements

You will bring 7+ years of endpoint engineering or EUC experience, including proven ownership of a large-scale Windows endpoint environment and experience providing technical leadership to other engineers. Strong hands‑on expertise with Microsoft Intune and SCCM/ConfigMgr, together with production experience implementing Windows Autopilot at scale, is essential.

You should have successfully planned and delivered Windows OS upgrade or end‑of‑life migration programs and have strong knowledge of Entra ID, Conditional Access, BitLocker, Windows compliance, Tanium or comparable endpoint management platforms, and mobile device management. Advanced PowerShell scripting skills and experience automating through the Microsoft Graph API*are also important.

The role suits an engineer who can translate broad objectives into a practical technical roadmap, establish standards, and take ownership of complex endpoint challenges from design through delivery. Certifications such as Microsoft 365 Certified: Endpoint Administrator Associate (MD-102), Administrator Expert (MS-102), SC-300, or SC-200 would be advantageous.

License No: 16S8060 / Registration No: R26161178