Intune / Endpoint Engineer (Level 2) — Night Shift

The role

We're hiring a Level 2 Intune / Endpoint Engineer to support a Canadian managed service provider's client base. You'll own endpoint management across their tenants and work as an embedded part of their delivery team.

Schedule and work setup

• Permanent night shift, aligned to North American Eastern Time
• Remote-first after onboarding
• On-site onboarding at our BGC office is required for the full onboarding period. This is a firm requirement and is not negotiable — please apply only if you can commit to it.

Responsibilities

• Administer Microsoft Intune / Endpoint Manager across multiple client tenants
• Build and maintain compliance policies, configuration profiles, and app deployments (Win32, LOB, store apps)
• Configure and run Windows Autopilot enrolment and provisioning
• Manage update rings, patch cycles, and endpoint security baselines
• Administer Entra ID — groups, dynamic membership, Conditional Access policies
• Manage BitLocker, Defender for Endpoint policy, and device compliance reporting
• Take Level 2 escalations from Level 1 and troubleshoot Windows 10/11 issues through to resolution
• Write and maintain PowerShell scripts for deployment, remediation, and reporting
• Maintain accurate documentation and keep client runbooks current
• Meet ticket SLAs and keep time entries and ticket notes clean and current

Requirements

• Minimum 3 years in endpoint, desktop, or systems engineering, including at least 2 years hands-on with Microsoft Intune
• Solid working knowledge of Entra ID (Azure AD) and Microsoft 365 administration
• Strong Windows 10/11 troubleshooting across hardware, OS, and application layers
• PowerShell scripting — able to write and modify scripts, not only execute them
• Clear written and spoken English; comfortable communicating with North American stakeholders
• Able to commit to a permanent night shift
• Reliable home internet and a working environment suitable for remote delivery

Strong advantages

• Experience in an MSP or multi-tenant environment
• French language capability (spoken and written)
• MD-102 (Endpoint Administrator Associate) or MS-102 (Microsoft 365 Administrator)
• Windows Autopilot deployments at scale
• Microsoft Defender for Endpoint
• SCCM / Configuration Manager co-management
• RMM and PSA platforms — NinjaOne, Datto, Kaseya, ConnectWise
• Prior experience supporting Canadian or US clients