Modern Workplace Engineer

Amplify5 UK Ltd; Cape Town; On-site; ZAR 700,000 - 900,000; Full time

Benefits offered by this job

UK client exposure

International ops

Supportive team

Career development

Job summary

amplify5 is partnering with a UK-based organisation operating at the forefront of the global luxury retail sector to recruit a Modern Workplace Engineer for our Cape Town team.

Supporting a business that collaborates with premium international brands and operates across multiple global markets, this role offers the opportunity to shape the future of a core enterprise platform that supports complex retail operations worldwide.

Qualifications

• 3+ years of experience administering Microsoft Intune and Entra ID for endpoint management and identity tooling.
• Experience configuring Windows Autopilot and Apple Business Manager enrolment from the ground up.
• Strong experience designing and managing Windows Update Rings and device compliance.

Responsibilities

• Own the modern endpoint management environment, including Intune, policies, and device security.
• Manage Windows Autopilot and Apple Business Manager enrolment, device lifecycle and updates.
• Drive automation using PowerShell, Graph, Power Automate and Intune reporting.
• Act as third-line escalation, resolve incidents, perform root cause analysis, and plan changes with rollback plans.

Skills

Microsoft Intune

Entra ID

PowerShell scripting

Microsoft Graph

Zero Trust security

Windows Autopilot

Apple Business Manager enrolment

Azure AVD

MD-102

SC-300

Exchange Online

Microsoft Teams

SharePoint Online

OneDrive

Microsoft 365 Apps

Education

MD-102 certification

SC-300 certification

Tools

Windows Autopilot

Apple Business Manager enrolment

Intune Remediations

Microsoft Graph

Azure AVD

Conditional Access

Job description

amplify5 is partnering with a UK-based organisation operating at the forefront of the global luxury retail sector to recruit a Modern Workplace Engineer for our Cape Town team. Supporting a business that collaborates with premium international brands and operates across multiple global markets, this role offers the opportunity to shape the future of a core enterprise platform that supports complex retail operations worldwide.

Role Overview

As a Modern Workplace Engineer, you will play a key role in shaping and managing the organisation’s modern workplace platform, with a strong focus on Microsoft Intune and endpoint management across Windows, Mac, iPad and Android devices. Working closely with technology leaders and cross-functional stakeholders, you will design, implement and maintain secure, consistent and supportable device environments while ensuring the platform remains aligned with the wider technology strategy.

This role combines technical ownership, platform management and third-line support, ensuring the modern workplace environment continues to deliver a secure and seamless experience for corporate users. You will also contribute to Microsoft 365 administration, collaboration, identity and automation, while proactively keeping pace with the Microsoft roadmap and balancing security, user experience and supportability.

Key Responsibilities

In this role you will take ownership of the organisation’s modern endpoint management environment, managing Microsoft Intune, configuration and compliance policies, Conditional Access and endpoint security across Windows 11 and Apple devices. You will ensure devices remain secure, compliant and consistently configured in line with Microsoft and CIS best practice.

You will own the end-to-end device lifecycle, including Windows Autopilot, Apple Automated Device Enrolment, application deployment, Windows Updates, driver management and secure device retirement. You will maintain accurate inventory and ensure users receive reliable and well-managed device experience.

You will drive automation and proactive endpoint management using PowerShell, Intune Remediations, Microsoft Graph, Power Automate, Endpoint Analytics and Intune reporting. Through this, you will identify issues early, reduce manual administration and continuously improve the performance and reliability of the endpoint environment.

You will also act as a third-line technical escalation point, resolving complex incidents and performing root cause analysis while planning and testing changes through controlled pilot and deployment rings. You will help strengthen service desk capability and ensure changes are delivered safely, with clear acceptance criteria and rollback plans.

What You’ll Bring

To succeed in this role, you will be able to demonstrate:

• 3+ years’ experience administering Microsoft Intune and Entra ID as primary endpoint management and identity tooling.
• Proven experience configuring Windows Autopilot and Apple Business Manager enrolment from the ground up.
• Strong practical experience designing and managing Windows Update Rings, including managing exceptions and resolving update-related issues.
• Sound understanding of Entra ID device identity, including registered, joined and hybrid joined devices, and the implications of each configuration.
• Expert-level knowledge in Microsoft Entra ID, Conditional Access, and device compliance, with proven experience designing and implementing Zero Trust security controls across complex enterprise environments.
• Strong Windows 11 and corporate device troubleshooting experience, with the ability to diagnose and resolve endpoint issues effectively.
• Practical PowerShell scripting experience across platform scripts, remediations, automation and reporting.
• Microsoft Graph for bulk operations or reporting beyond what the portal offers.
• Experience deploying applications, policies and operating system updates through Intune at scale across a corporate device estate.
• Configuration and management of Azure AVD machines
• MD-102 certification is the baseline expectation, although practical hands-on experience and demonstrated technical capability will carry greater weight than certification alone.
• Preferred Qualifications
• MD-102 is the baseline certification expectation, and SC-300 is valuable given the Conditional Access overlap, though practical evidence carries more weight than certification alone.
• Administration of Exchange Online, Microsoft Teams, SharePoint Online and OneDrive, and deployment of Microsoft 365 Apps.
• Endpoint vulnerability management and reducing reliance on local administrator rights.
• Awareness of Microsoft 365 Copilot and agent capabilities, including governance, security and operational considerations.

Skills & Behaviors

To succeed in this role, you will be able to demonstrate:

• Strong attention to detail and an analytical mindset, with the ability to assess technical information, identify patterns and make well-informed decisions.
• Agility showcasing the ability to work effectively in a dynamic environment, adapting quickly to changing priorities, requirements and workloads while maintaining a high standard of delivery.
• Strong communication skills, with the ability to explain complex technical concepts clearly and confidently to both technical and non-technical audiences.
• A proactive approach to staying informed on the Microsoft product and technology roadmap, with the ability to assess changes and adapt to the modern workplace environment at pace.
• A proactive, can-do attitude, with a willingness to take ownership, solve problems and identify opportunities to improve the reliability, security and effectiveness of the endpoint environment.

What You’ll Receive

• Opportunity to work with a UK-based client operating in the global luxury retail sector.
• Exposure to international business operations and complex technology environments.
• Supportive team environment within amplify 5.
• Opportunities for professional development and career growth.

This role is employed by Amplify 5 and based in our Cape Town office, working with and managed by our UK-based client and their international technology function’s senior leadership team.