EUC Engineer

EUC Engineer (Endpoint Management and Intune)

£55,000 to £60,000

Working pattern: Hybrid. x2 days in Office

Location: London

Benefits: Pension up to 18%, Bonus, 34 days holiday + a heap of flexible benefits including Training Fund, Life Assurance, Private Medical Insurance, Volunteering, Electric Car Scheme..

A well-known professional services partnership is hiring an EUC Engineer to take ownership of its Intune and endpoint management setup across a firm of more than a thousand people.

The firm is investing in the engineering side of its end user technology. This role sits at the centre of that: you would decide how devices are built, secured, patched and kept consistent across Windows, macOS, iOS and Android, and you would be who the support teams go to when an Intune problem is beyond them.

What you would be running:

• Intune policies, configuration profiles, compliance rules and security baselines across the whole device estate
• Windows Autopilot provisioning, including building it out further and fixing it when it misbehaves
• Application packaging, deployment and lifecycle management, with automated patching through a tool such as Patch My PC
• PowerShell automation to take manual work out of device management and remove recurring issues at the source
• Third line escalations from the 1st and 2nd line teams, and the documentation and runbooks that help them solve more themselves
• Endpoint security baselines, working alongside the Infrastructure and Security teams to cut vulnerabilities and unmanaged software

What they need from you:

• Hands-on time running Intune in a mid-sized or large business, not a small office.
• Endpoint admin knowledge at MD-102 level, certified or not.
• Experience packaging applications and automating patching, with Patch My PC or something similar.
• Real depth in Windows 11, Entra ID, Conditional Access and Autopilot.
• A clear view of how MDM and MAM differ and when you would use each.
• PowerShell you have written yourself to automate, configure or report on devices.
• The ability to work out why a Windows or mobile device is misbehaving after the first two lines of support have run out of ideas.

Useful but not essential: having taken local admin rights away from users, working to Zero Trust or secure-by-default principles, managing Macs through Intune or Jamf, using Defender for Endpoint and the wider M365 security tooling, and working in an ITIL environment.

Apply today for immediate consideration.

Please note, our customer is unable to sponsor at this time.