Senior End-User Computing (EUC) Engineer

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting is seeking a Lead EUC Engineer in Singapore to own a large-scale Windows and mobile endpoint environment, overseeing 15,000+ endpoints and shaping the EUC roadmap. The role is hands-on yet highly strategic, combining engineering work with architecture decisions and mentoring of other engineers.

You will drive technical direction, standardize processes, and lead automation initiatives using PowerShell and the Microsoft Graph API while coordinating across provisioning, security,

Qualifications

• 7+ years in EUC or endpoint engineering with large-scale Windows environments.
• Hands-on expertise with Intune and SCCM/ConfigMgr (Windows and mobile).
• Strong experience with Windows Autopilot and enterprise deployments.
• Knowledge of BitLocker, Entra ID, Conditional Access, Windows device compliance.
• Proven ability to mentor engineers and lead technical workstreams.
• PowerShell scripting and Microsoft Graph API experience.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Set technical direction and engineering standards for the endpoint environment.
• Own the roadmap across device provisioning, Windows lifecycle, encryption, patching, and MDM.
• Lead design and continuous improvement of Windows Autopilot with Entra-joined and hybrid environments.
• Maintain Intune configurations, deployment profiles, update policies, drivers, firmware, and remediation processes.
• Plan and lead Windows feature upgrades and end-of-life migrations; manage Windows Update for Business and Windows Hello for Business.
• Establish Intune standards for iOS/Android, including BYOD controls and app deployment.
• Lead workstreams, contribute to architecture reviews, evaluate tooling, and mentor junior engineers.
• Drive automation using PowerShell and Microsoft Graph API to improve consistency and efficiency.

Skills

EUC engineering

Intune

SCCM/ConfigMgr

Windows Autopilot

BitLocker

Entra ID / Conditional Access

PowerShell

Microsoft Graph API

Mentoring

Communication

Automation

Tools

Tanium

ConfigMgr

Job description

Overview

A leading organization is hiring a Lead EUC Engineer in Singapore to take technical ownership of a large-scale Windows and mobile endpoint environment. This is a hands‑on technical leadership role covering more than 15,000 endpoints, with responsibility for the EUC engineering roadmap, Microsoft Intune, Windows Autopilot, SCCM/ConfigMgr, endpoint security, OS lifecycle management, and automation. The role combines deep engineering work with architecture, technical decision‑making, and mentoring of other engineers.

Responsibilities

You will set the technical direction and engineering standards for the endpoint environment, owning the roadmap across device provisioning, Windows lifecycle, encryption, patching, and mobile device management. You will lead the design and continuous improvement of Windows Autopilot across Entra‑joined and hybrid environments, while maintaining Intune configurations, deployment profiles, update policies, drivers, firmware, and remediation processes.

You will also plan and lead Windows feature upgrades and end‑of‑life migration programs, with responsibility for Windows Update for Business, Windows Hello for Business, LAPS, BitLocker, application control, and endpoint compliance. Across iOS and Android, you will establish Intune standards for corporate and BYOD devices, including MAM/app protection, certificates, Wi‑Fi/VPN profiles, and application deployment.

Beyond day‑to‑day engineering, you will lead technical workstreams, contribute to architecture and design reviews, evaluate tooling, and mentor junior and mid‑level engineers. Automation will be a key focus, using PowerShell and Microsoft Graph API to improve consistency, scalability, and operational efficiency.

Requirements

• At least 7 years of experience in End User Computing (EUC) or endpoint engineering, including end‑to‑end responsibility for a large‑scale Windows endpoint environment.
• Hands‑on expertise in Microsoft Intune and SCCM / ConfigMgr, covering both Windows and mobile endpoint administration.
• Strong production experience with Windows Autopilot, including the deployment and management of devices at enterprise scale.
• Strong technical knowledge of BitLocker, Microsoft Entra ID, Conditional Access, and Windows device compliance.
• Practical experience using Tanium, SCCM / ConfigMgr, or equivalent technologies for endpoint management and patching.
• Advanced PowerShell scripting skills, with experience automating endpoint administration and operational activities through the Microsoft Graph API.
• Proven ability to lead technical workstreams, provide engineering direction, and mentor junior and mid‑level team members.
• Effective communication skills with the ability to engage confidently with both technical teams and non‑technical stakeholders.
• Strong focus on automation, standardization, and repeatable engineering practices rather than manual processes.
• Relevant Microsoft certifications such as Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) or equivalent are valued. MS-102, SC-300, or SC-200 certifications would be an advantage.