Platform Engineer - Endpoint Management & Azure

About the role

The Platform Engineer works within the Cloud Platform Team to implement, maintain and support the organisation's endpoint management ecosystem, in close collaboration with Digital Workplace, Security, Infrastructure and Service Delivery teams. The role ensures endpoint devices stay secure, compliant and reliably managed throughout their lifecycle, while contributing to the delivery of device management services and workplace technologies.

Key responsibilities

• Administer and improve the Endpoint Management platform and manage devices through provisioning, deployment, maintenance, refresh and retirement.
• Configure and maintain Microsoft Intune, Autopilot and related technologies; implement compliance policies, configuration standards and security controls.
• Pack, test and deploy applications across Windows, macOS, mobile and virtual desktop environments.
• Support vulnerability remediation, mobile device management, enterprise print management and Azure Virtual Desktop environments.
• Investigate and resolve endpoint, application and workplace technology incidents and service requests.
• Develop automation and scripting solutions, and maintain technical documentation and operational procedures.
• Work with internal teams and third-party suppliers, and keep up to date with endpoint management technologies and security best practices.

Required profile

• Experience in a large-scale enterprise endpoint management environment.
• Experience administering Microsoft Intune and Endpoint Management solutions.
• Understanding of endpoint compliance, device security and modern workplace technologies.
• Experience with device lifecycle and asset management, and with mobile device management solutions.
• Familiarity with IT Service Management platforms such as ServiceNow, and with frameworks such as ISO27001 and Cyber Essentials.
• Strong troubleshooting, analytical, organisational and communication skills, with a proactive attitude to service improvement.

Required skills

• Microsoft Intune, Microsoft Endpoint Manager, Windows Autopilot, Entra ID and Conditional Access.
• Windows, macOS and iOS administration; Microsoft Defender for Endpoint and BitLocker/FileVault.
• Application packaging, patch management, vulnerability management and ServiceNow asset and service management.
• PowerShell and Microsoft Graph.