Endpoint Management Lead

Advania Group; Cape Town; Hybrid; ZAR 558,000 - 725,000; Full time

Benefits offered by this job

Hybrid working policy

Job summary

Advania Group is seeking an Endpoint Management Lead to drive the Managed Device service in our Cape Town team. You will own technical delivery, act as senior escalation, and shape the roadmap through standardization and automation across Windows and macOS endpoints.

The role requires hands-on Intune expertise, macOS management, and ITIL-aligned processes, with a focus on security baselines and lifecycle management. Hybrid working is offered to balance office and remote work.

Qualifications

• Experience with Microsoft Intune and Windows endpoint management.
• Experience managing macOS devices and Apple Business Manager.
• Strong understanding of Entra ID, Conditional Access and security baselines.
• Experience packaging and deploying Win32 apps (Enterprise App Catalog).
• Ability to diagnose complex endpoint issues and lead escalations.
• Experience leading client discussions and service reviews.
• Strong PowerShell, automation, and reporting skills.
• Knowledge of ITIL incident, change and problem management.

Responsibilities

• Provide technical ownership for the Managed Device service and maintain standards.
• Act as senior technical escalation point for Windows/macOS and Intune issues.
• Lead technical client discussions and translate priorities into improvement plans.
• Maintain standards for enrolment, config, compliance, encryption, app deployment.
• Oversee app onboarding and packaging on Enterprise App Catalog and automated packaging.
• Oversee endpoint baselines, BitLocker, FileVault, Windows LAPS and remediation.
• Identify opportunities for service evolution with new platform capabilities.
• Reduce repetitive work via PowerShell, automation and proactive remediation.

Skills

Intune

Windows management

macOS management

Apple Business Manager

Enrollment

Compliance

PowerShell automation

Automation & reporting

Technical leadership

Client discussions

Tools

RoboPack

Enterprise App Catalog

Job description

Position Overview

We are looking for a Endpoint Management Lead to join our Managed Services business in Cape Town.

In this role, you will have the opportunity to provide technical leadership and ownership for the Managed Device service, ensuring secure, reliable and consistent management of Windows and macOS endpoints.

Your role will lead technical delivery, act as the senior escalation point, develop team capability, support client engagements and service reviews, and convert service, security and customer requirements into an actionable roadmap. You will also drive service evolution through standardization, automation, proactive remediation, lifecycle management and adoption of approved Microsoft and Apple capabilities.

Salary & Benefits

The budgeted salary for this role is between 50,000 and 65,000 ZAR monthly, depending on experience.

Hybrid working

We recognise the benefits that remote and flexible working brings.

We operate a hybrid working policy that allows our employees to balance time in the office and time from home. Each team within our organisation can decide how to implement this policy.

Responsibilities

• Providing technical ownership for the Managed Device service, maintaining agreed standards, controls, dependencies, risks and service health across supported client estates.
• Acting as the senior technical escalation point for complex Windows, macOS, Intune, enrolment, compliance, application, update, identity and endpoint management issues.
• Leading technical client discussions, contributing to service reviews, explaining risks and recommendations clearly, and translating customer priorities into practical improvement plans.
• Maintaining consistent standards for Windows and Mac enrolment, configuration, compliance, encryption, application deployment, updates and operating system lifecycle management.
• Governing application onboarding, packaging, testing, deployment, update methods, ownership and retirement, including Enterprise App Catalog and approved automated packaging platforms.
• Providing technical oversight of endpoint baselines, compliance policies, BitLocker, FileVault, Windows LAPS, Conditional Access dependencies and remediation of identified configuration risks.
• Identifying, assessing and progressing service evolution opportunities involving new platform capabilities, standardization, lifecycle changes, monitoring, reporting and customer-led improvements.
• Reducing repetitive manual activity and recurring issues through PowerShell, automation, proactive remediation, self-healing and improved operational reporting.

Qualifications & Experience

• Extensive hands-on experience with Microsoft Intune, Windows endpoint management and modern device management practices.
• Practical experience managing macOS devices, Apple Business Manager, Automated Device Enrolment, configuration profiles, compliance and application deployment.
• Strong knowledge of Microsoft Entra ID, Conditional Access integration, security baselines, BitLocker, FileVault, Windows LAPS and endpoint compliance.
• Experience of application packaging, testing, deployment and lifecycle management, including Win32 applications, Enterprise App Catalog and automated packaging platforms such as RoboPack.
• Ability to diagnose complex endpoints, enrolment, compliance, application, update and identity-related issues and lead technical escalations through to resolution.
• Experience leading client-facing technical discussions, service reviews, risk conversations and improvement planning.
• Strong PowerShell, automation, proactive remediation, reporting and operational data analysis skills.
• Working knowledge of ITIL-aligned incident, request, problem, change, knowledge and continual improvement practices.
• Proven capability in technical leadership, mentoring, peer review, workload prioritization and cross-team collaboration.
• Clear written and verbal communication, with the ability to translate technical details into practical customer and operational outcomes.

About Us

We are the tech company with people at heart.

At Advania, we believe in empowering people to create sustainable value through the clever use of technology. As one of Microsoft's leading partners in the UK, specialising in Azure, Security, Dynamics 365, and Microsoft 365, we have a proven track record of success in delivering transformational IT services.

Our Selection Process

We are committed to ensuring an equitable experience for all candidates, regardless of race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, or any other basis as protected by applicable law.

Please do let us know if you'll need any reasonable adjustments as part of the selection process by highlighting these on your application form.

As part of our commitment to our clients we will need to carry out background checks, including a criminal record check, for all offers of employment. If you have any unspent criminal convictions or questions about the screening process, please notify your recruiter once the application has been submitted.

We are the tech company with people at heart. Tech is created for people. Our services impact every part of life. We are passionate about understanding your issues, your business, your needs. Our business is built around understanding people, and our employees are empowered to act on this understanding every day.