Endpoint Engineer (SCCM and Intune)

Job Responsibilities

Endpoint Management & Platform Operations

• Administer and maintain SCCM/MECM, Microsoft Intune, and Workspace ONE UEM platforms.
• Manage endpoint enrollment, configuration profiles, compliance policies, application deployments, and RBAC.
• Monitor platform health, availability, and operational performance.
• Ensure endpoint inventory accuracy and operational hygiene through routine health checks and validations.
• Support coexistence of multiple endpoint management platforms while minimizing policy conflicts.

Patching, Vulnerability Management & Compliance

• Execute software patching operations through SCCM, including ADRs, maintenance windows, deployment schedules, and compliance reporting.
• Monitor and improve patch compliance across enterprise endpoints.
• Drive vulnerability remediation activities and validate compliance within required timelines.
• Investigate and resolve non-compliant devices and deployment failures.
• Support compliance dashboards and operational reporting.

Application Lifecycle & OS Management

• Support operating system deployments, task sequences, feature updates, servicing, and in-place upgrades.
• Coordinate driver and BIOS packaging activities.
• Package and deploy applications using SCCM and Intune.
• Manage application dependencies, supersedence, detection methods, and deployment rings.
• Perform post-deployment validation and issue remediation.

Incident Management & Operational Excellence

• Troubleshoot endpoint deployment, client health, policy, and application issues.
• Participate in major incident bridges and war rooms to support rapid service restoration.
• Work within Incident, Problem, and Change Management processes.
• Prepare change documentation, risk assessments, validation plans, and implementation procedures.
• Drive SLA adherence and contribute to reducing Mean Time to Resolution (MTTR).

Automation & AI Adoption

• Develop PowerShell scripts for automation, compliance monitoring, and endpoint remediation.
• Create operational runbooks, procedures, and automation workflows.
• Identify opportunities to leverage AI tools for ticket summarization, log analysis, knowledge article generation, and operational efficiencies.
• Pilot AI and automation initiatives that improve reliability, speed, and user experience.
• Ensure AI adoption follows security, privacy, and data governance standards.

Required Qualifications

• 6+ years of hands-on experience administering Microsoft SCCM/MECM.

• 3+ years of hands-on experience administering Microsoft Intune.

• Experience managing endpoint platform health, availability, and operational reliability.

• Strong experience with:

  • SCCM patching operations
  • Automated Deployment Rules (ADR)
  • Deployment rings
  • Maintenance windows
  • Compliance reporting
  • Vulnerability remediation

• Experience supporting endpoint health monitoring and remediation activities.

• Strong PowerShell scripting and automation experience.

• Experience creating operational runbooks, scripts, and support documentation.

• Experience participating in major incident management and war room activities.

• Working knowledge of Incident, Problem, and Change Management processes.

• Excellent troubleshooting skills and ability to resolve complex endpoint management issues.

• Strong communication and stakeholder management skills.

• Ability to identify continuous improvement opportunities through automation and AI-assisted workflows.

Core Technical Skills

• MECM / SCCM

  • Application deployment
  • Collections
  • Content distribution
  • Client health
  • Reporting
  • Boundaries
  • Software Updates

• Microsoft Intune

  • Device enrollment
  • Compliance policies
  • Configuration profiles
  • Win32 application deployment
  • RBAC
  • Troubleshooting

• Workspace ONE UEM

  • Profiles
  • Smart Groups
  • Compliance policies
  • Application distribution
  • Device troubleshooting

• Automation

  • PowerShell
  • Operational scripting
  • Endpoint remediation

Preferred Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or related field.
• ITIL Foundation Certification.
• Microsoft Endpoint Management certifications.
• Workspace ONE / Omnissa certifications or training.
• 2+ years of hands-on Workspace ONE UEM administration experience.
• Experience using AI tools to improve operational efficiency and knowledge management.

Success Indicators

• High endpoint platform availability and health.
• Improved patch compliance and vulnerability remediation rates.
• Reduced repeat incidents through proactive remediation and root cause analysis.
• Increased automation adoption and operational efficiency.
• Consistent SLA achievement and reduced MTTR.

What we offer

• Laptop/Computer Provided by the Company
• Market Total Rewards Package
• Retirement Plan
• Medical Plan (HMO) from Day 1 of employment
• Dental, Medical, and Optical Reimbursements
• Life and Disability Insurance
• Paid Time-Off Benefits
• Sick Leave Conversion
• Tuition Fee Reimbursement
• Employee Assistance Program (EAP)
• Annual Performance Based Merit Increases
• Employee Recognition
• Training and Staff Development
• Employee Referral Program
• Employee Volunteerism Opportunity
• All Mandatory Statutory Benefits

Who we are

• Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.
• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.
• This includes our over 25,000 employees in the Philippines. Elevate your career with a leading health care company while improving lives.