Endpoint Management Lead

Advania UK; Cape Town; Hybrid; ZAR 558,000 - 725,000; Full time

Benefits offered by this job

Hybrid working policy

Remote work option

Job summary

Advania UK is seeking an Endpoint Management Lead to drive technical leadership for the Managed Device service in Cape Town. You will own delivery across Windows and macOS endpoints, guide security and compliance, and shape the roadmap with automation and standardization.

You will lead client conversations, manage escalations, and mentor teams while aligning with Microsoft and Apple capabilities to improve service quality and lifecycle management.

Qualifications

• Extensive hands-on experience with Microsoft Intune and Windows endpoint management.
• Practical experience managing macOS devices and Apple Business Manager.
• Strong knowledge of Entra ID, Conditional Access, security baselines and BitLocker.
• Experience packaging, testing, deployment of Win32 apps and Enterprise App Catalog.
• Ability to diagnose complex endpoint and identity issues and lead escalations.
• Experience leading client discussions, service reviews and improvement planning.
• Strong PowerShell, automation, reporting and data analysis skills.
• Working knowledge of ITIL-aligned incident, change and continual improvement.

Responsibilities

• Provide technical ownership for the Managed Device service across client estates.
• Act as senior escalation point for Windows, macOS, Intune, and endpoint issues.
• Lead client discussions, explain risks, and translate priorities into improvement plans.
• Governing enrolment, configuration, compliance, encryption and OS lifecycle management.
• Governing app onboarding, packaging, testing and deployment via approved platforms.
• Provide oversight of endpoint baselines, policy enforcement and remediation.
• Identify opportunities for service evolution with standardization and automation.
• Reduce manual activity through PowerShell and proactive remediation.

Skills

Intune

Windows endpoint mgmt

macOS management

Apple Business Manager

Automated Device Enrollment

Configuration profiles

Endpoint compliance

PowerShell

Automation

ITIL practices

Technical leadership

Tools

RoboPack

Enterprise App Catalog

Job description

Endpoint Management Lead

Position Overview

We are looking for a Endpoint Management Lead to join our Managed Services business in Cape Town.

In this role, you will have the opportunity to provide technical leadership and ownership for the Managed Device service, ensuring secure, reliable and consistent management of Windows and macOS endpoints.

Your role will lead technical delivery, act as the senior escalation point, develop team capability, support client engagements and service reviews, and convert service, security and customer requirements into an actionable roadmap. You will also drive service evolution through standardization, automation, proactive remediation, lifecycle management and adoption of approved Microsoft and Apple capabilities.

Salary & Benefits

The budgeted salary for this role is between 50,000 and 65,000 ZAR monthly, depending on experience.

Hybrid working

We recognise the benefits that remote and flexible working brings.

We operate a hybrid working policy that allows our employees to balance time in the office and time from home. Each team within our organisation can decide how to implement this policy. If you have any questions after applying, please reach out to our recruitment team.

Responsibilities

Some of your day-to-day responsibilities will include:

• Providing technical ownership for the Managed Device service, maintaining agreed standards, controls, dependencies, risks and service health across supported client estates.

• Acting as the senior technical escalation point for complex Windows, macOS, Intune, enrolment, compliance, application, update, identity and endpoint management issues.

• Leading technical client discussions, contributing to service reviews, explaining risks and recommendations clearly, and translating customer priorities into practical improvement plans.

• Maintaining consistent standards for Windows and Mac enrolment, configuration, compliance, encryption, application deployment, updates and operating system lifecycle management.

• Governing application onboarding, packaging, testing, deployment, update methods, ownership and retirement, including Enterprise App Catalog and approved automated packaging platforms.

• Providing technical oversight of endpoint baselines, compliance policies, BitLocker, FileVault, Windows LAPS, Conditional Access dependencies and remediation of identified configuration risks.

• Identifying, assessing and progressing service evolution opportunities involving new platform capabilities, standardization, lifecycle changes, monitoring, reporting and customer-led improvements.

• Reducing repetitive manual activity and recurring issues through PowerShell, automation, proactive remediation, self-healing and improved operational reporting.

Qualifications & Experience

The right candidate for this role will have:

• Extensive hands‑on experience with Microsoft Intune, Windows endpoint management and modern device management practices.

• Practical experience managing macOS devices, Apple Business Manager, Automated Device Enrolment, configuration profiles, compliance and application deployment.

• Strong knowledge of Microsoft Entra ID, Conditional Access integration, security baselines, BitLocker, FileVault, Windows LAPS and endpoint compliance.

• Experience of application packaging, testing, deployment and lifecycle management, including Win32 applications, Enterprise App Catalog and automated packaging platforms such as RoboPack.

• Ability to diagnose complex endpoints, enrolment, compliance, application, update and identity‑related issues and lead technical escalations through to resolution.

• Experience leading client‑facing technical discussions, service reviews, risk conversations and improvement planning.

• Strong PowerShell, automation, proactive remediation, reporting and operational data analysis skills.

• Working knowledge of ITIL‑aligned incident, request, problem, change, knowledge and continual improvement practices.

• Proven capability in technical leadership, mentoring, peer review, workload prioritization and cross‑team collaboration.

• Clear written and verbal communication, with the ability to translate technical details into practical customer and operational outcomes.

About Us:

We are the tech company with people at heart.

At Advania, we believe in empowering people to create sustainable value through the clever use of technology. As one of Microsoft's leading partners in the UK, specialising in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of success in delivering transformational IT services.

Our Selection Process:

We are committed to ensuring an equitable experience for all candidates, regardless of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, or any other basis as protected by applicable law.

Please do let us know if you’ll need any reasonable adjustments as part of the selection process by highlighting these on your application form.

As part of our commitment to our clients we will need to carry out background checks, including a criminal record check, for all offers of employment. If you have any unspent criminal convictions or questions about the screening process, please notify your recruiter once the application has been submitted.

#LI-Hybrid