Lead EUC Engineer

UPPER SPRING CONSULTING PTE. LTD.; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

UPPER SPRING CONSULTING PTE. LTD. is seeking a Lead EUC Engineer to own the Windows and mobile endpoint estate across a large, multi-business-unit environment.

You will own the engineering roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management, setting the technical direction and driving automation and standards. This is a hands-on leadership role where you mentor engineers, plan multi-quarter workstreams, and represent EUC engineering in architecture reviews and

Qualifications

• Minimum 7+ years in endpoint engineering / EUC with Windows fleet experience.
• Experience leading workstreams and mentoring other engineers.
• Expert-level Intune/SCCM administration across Windows and mobile.
• Hands-on Autopilot experience in production at scale.
• Ownership of Windows OS upgrade/EOL migrations from planning to delivery.
• Strong knowledge of BitLocker, Entra ID, Conditional Access, and Windows compliance.
• Familiar with Tanium or similar endpoint management tools and patching.

Responsibilities

• Own and maintain the technical roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management.
• Set engineering standards, baselines, and best practices; drive consistency across the estate.
• Mentor and provide technical direction to junior and mid-level engineers; review their work.
• Lead design reviews, evaluate tooling, and make architecture recommendations.
• Design and improve zero-touch provisioning using Windows Autopilot; manage profiles.
• Plan Windows feature and EOL upgrade campaigns; own update rings and policies.
• Lead operations for Windows Hello for Business, LAPS, and application control.
• Set strategy for iOS/Android enrolment, configuration, and compliance via Intune.

Skills

Intune administration

SCCM administration

PowerShell scripting

Microsoft Graph API

Windows Autopilot

OS upgrade planning

BitLocker

Entra ID

Conditional Access

Tanium

Endpoint management

Education

Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)

Microsoft 365 Certified: Administrator Expert (MS-102)

SC-300

SC-200a

Tools

Windows Autopilot

Tanium

SCCM ConfigMgr

Job description

We are representing our client (An established IT technology provider) to look for a Lead End User Computing (EUC) Engineer to act as the technical lead for their Windows and mobile endpoint estate across a large, multi-business-unit environment. You will own the engineering roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management, setting the technical direction,raising the bar on automation and standards and mentoring junior and mid-level engineers to deliver it.

This is a hands-on leadership role.

You will still be deep in the Intune admin centre and PowerShell, but you are also expected to plan multi-quarter workstreams, make architecture and toolingdecisions, and represent EUC engineering in design reviews and change processes. You’ll be working at meaningful scale, a fleet of 17,000 endpoints across multiple business units.

Responsibilities

Technical leadership & roadmap

• Own and maintain the technical roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management.
• Set engineering standards, baselines, and best practices; drive consistency across the estate.
• Mentor and provide technical direction to junior and mid-level engineers; review their work and grow their capability.
• Lead design reviews, evaluate new tooling/approaches, and make architecture recommendations to the EUC Manager.

Endpoint provisioning & imaging

• Design and continuously improve zero-touch device provisioning using Windows Autopilot (Entra hybrid and Entra-joined).
• Own Autopilot profiles, configurations, deployment profiles, and dynamic grouping.
• Maintain provisioning quality, driver/firmware management, OEM relationships, and resolution of complex enrolment failures.

OS lifecycle & upgrades

• Plan and lead Windows feature and EOL upgrade campaigns across the fleet.
• Own update rings, Windows Update for Business policies, and rollout strategy.
• Diagnose and develop repeatable remediation for upgrade failures (in-place upgrade blocks, hardening conflicts, disk/component issues).
• Lead operations for Windows Hello for Business, LAPS, and application control

Mobile device management

• Set strategy and standards for iOS and Android enrolment, configuration, and compliance via Intune (BYOD and corporate-owned).
• Own app protection / MAM policies, certificate and Wi‑Fi/VPN profiles, and mobile app deployment.

Requirements

• Minimum 7+ years in endpoint engineering / EUC, with a track record of owning a Windows fleet end-to-end at scale.
• Demonstrated experience leading workstreams and mentoring or technically guiding other engineers.
• Expert‑level Microsoft Intune/SCCM administration across Windows and mobile.
• Deep, hands‑on Windows Autopilot experience in production at scale.
• Proven ownership of Windows OS upgrade / EOL migration programmes from planning through delivery.
• Strong command of BitLocker, Entra ID, Conditional Access, and Windows compliance.
• Tanium (or SCCM / ConfigMgr) for endpoint management and patching.
• Advanced PowerShell scripting; comfortable automating against the Microsoft Graph API.
• Certifications such asMicrosoft 365 Certified: Endpoint Administrator Associate (MD-102)or equivalent;Microsoft 365 Certified: Administrator Expert (MS-102),SC-300, orSC-200a plus