Lead Endpoint Engineer: Windows & Mobility Automation

KERRY CONSULTING PTE. LTD.; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Kerry Consulting Pte. Ltd. is seeking a hands-on Lead Endpoint Engineer to own the EUC environment with responsibility for 15,000+ endpoints in Singapore.

You will set the technical direction and roadmap for provisioning, Windows lifecycle, encryption, and MDM, balancing architecture decisions with hands-on delivery. You will lead design and deployments of Windows Autopilot, Entra ID/CA, and Intune configurations, while mentoring engineers and driving automation via PowerShell and the Microsoft

Qualifications

• 7+ years of endpoint EUC Engineering experience.
• Proven ownership of a large-scale Windows endpoint environment and technical leadership of engineers.
• Hands-on with Microsoft Intune and SCCM/ConfigMgr at scale; experience with Windows Autopilot.

Responsibilities

• Define the technical direction and engineering standards for the endpoint environment and own the roadmap across provisioning, Windows lifecycle, encryption, patching, and MDM.
• Lead the design and continuous improvement of Windows Autopilot across Entra-joined and hybrid environments while maintaining Intune configurations and deployment profiles.
• Plan and lead Windows feature upgrades and end-of-life migrations, including Windows Update for Business and BitLocker policies.
• Establish Intune standards for iOS/Android corporate and BYOD devices, including MAM, certificates, Wi‑Fi/VPN profiles, and app deployment.
• Mentor junior and mid-level engineers; drive automation using PowerShell and Microsoft Graph API to improve efficiency.

Skills

Endpoint engineering

Intune

SCCM/ConfigMgr

Windows Autopilot

PowerShell

Microsoft Graph API

Automation

Entra ID / Conditional Access

MDM

Architecture & mentoring

Tools

Tanium

Job description

Kerry Consulting Pte. Ltd. is seeking a hands-on Lead Endpoint Engineer to own the EUC environment with responsibility for 15,000+ endpoints in Singapore.

You will set the technical direction and roadmap for provisioning, Windows lifecycle, encryption, and MDM, balancing architecture decisions with hands-on delivery. You will lead design and deployments of Windows Autopilot, Entra ID/CA, and Intune configurations, while mentoring engineers and driving automation via PowerShell and the Microsoft