MAIN DUTIES/RESPONSIBILITIES OF THE ROLE:
- Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
- Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
- Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
- Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
- Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
- Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
- Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
- Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
- Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.
SPECIAL CIRCUMSTANCES (e. g. shifts, travel overseas, hours):
- 9 hour working days between core business hours (0800 – 1800)
- Some weekend and on-call work will also be necessary.
- Overseas travel will be required on occasion.
PERSON SPECIFICATION
WORK EXPERIENCE/BACKGROUND:
Essential
Desirable:
- Ability to work in a challenging and dynamic environment
- Experience of providing production and development support for business critical applications and servers
- Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
- 5+ Years of experience specialising in Microsoft Azure technologies
- Bachelor’s degree in Engineering, computer science, or equivalent work experience.
- Experience of working in a financial background is preferred.
Essential
Desirable:
- Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
- Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
- Microsoft SCCM / MECM, Jamf
- Patch My PC
- PowerShell scripting in enterprise production environments
- Microsoft Intune / Endpoint Management
- Intune update rings
- Windows 10 & 11 desktops - performance troubleshooting and optimization.
- General networking experience
- Extensive knowledge of the Microsoft Azure Cloud Adoption Framework (Certified Azure Admin Associate)
- Extensive knowledge of the Microsoft 365 E5 suite of services (M365/Identity/Security Certified)
- A good understanding of the Azure technologies
TECHNICAL SKILLS/KNOWLEDGE/PROFESSIONAL QUALIFICATIONS:
COMPETENCIES/OTHER REQUIREMENTS:
Self-motivated individual that can work under their own initiative with minimal supervision
Able to deal effectively with external suppliers and providers.
Able to communicate effectively with end users, management, and other teams
Take ownership of issues and follow through with them until resolution
Excellent written and verbal communication
Teamwork and interpersonal skills
A willingness to learn and keep up to date with technologies