Endpoint Engineer

Birmingham, 2-3 days onsite - must be eligible for SC or have active SC

The ideal candidate will have strong experience with modern endpoint management technologies, particularly Microsoft Intune, Windows, Active Directory, Entra ID, and PowerShell , along with practical experience using Microsoft Defender for Endpoint .

Key Responsibilities Manage and maintain the organisation's Windows endpoint estate.

Administer and manage Microsoft Intune for device configuration, compliance, application deployment, and endpoint management.

Support Windows Autopilot and modern device provisioning and deployment.

Manage endpoint configuration through Intune, Group Policy, and other management platforms.

Package, test, deploy, and maintain applications across the endpoint environment.

Manage Windows updates, patching, feature upgrades, and endpoint lifecycle activities.

Develop and maintain endpoint configuration and security baselines.

Support and manage Microsoft Defender for Endpoint , including endpoint protection, security policies, device investigations, and remediation.

Work with the Cyber Security team to investigate and resolve endpoint security alerts and vulnerabilities.

Monitor endpoint health, compliance, performance, and security posture.

Use PowerShell to automate endpoint administration, reporting, deployment, and troubleshooting activities.

Troubleshoot complex Windows, application, device, and endpoint management issues.

Provide escalation support to the Service Desk for complex endpoint-related incidents.

Manage device compliance and integration with Microsoft Entra ID and Conditional Access.

Support endpoint encryption, authentication, security controls, and other endpoint protection technologies.

Contribute to vulnerability remediation and endpoint hardening activities.

Maintain technical documentation, configuration standards, and operational procedures.

Assist with endpoint technology projects, migrations, upgrades, and improvements.

Identify o...