Endpoint Management Systems Engineer (SCCM & Intune)

About the role

We are looking for an experienced Endpoint Management Systems Engineer to lead the design, deployment, configuration, maintenance and support of our enterprise endpoint management infrastructure. The role focuses on Microsoft Endpoint Configuration Manager (SCCM) and Microsoft Intune to ensure secure, efficient and compliant operation of all desktop and mobile devices.

Key responsibilities

• Administer and maintain SCCM and Intune platforms, ensuring high availability, scalability and security.
• Package, test and deploy software applications and updates across the organisation.
• Schedule, monitor and report on OS and third‑party patch deployments to maintain compliance.
• Develop and maintain standardized desktop images, task sequences and perform Windows OS deployments using SCCM (and MDT/WDS when required).
• Provide Level 2/3 technical support for endpoint‑related incidents and service requests, troubleshooting within agreed SLAs.
• Monitor system health, performance and compliance status, generating regular reports on deployment success, patching and asset inventory.
• Automate routine tasks using PowerShell and other scripting languages to improve operational efficiency.
• Maintain comprehensive documentation of configurations, processes and SOPs, collaborating with security, networking and service‑desk teams.
• Ensure endpoint configurations adhere to internal policies and regulatory standards, integrating antivirus and baseline security settings.

Required profile

• Proven experience as an Endpoint Management Systems Engineer or similar role.
• Strong expertise in Microsoft SCCM and Microsoft Intune.
• Hands‑on experience with OS deployment, patch management and software packaging.
• Ability to troubleshoot complex incidents and provide Level 2/3 support.
• Familiarity with compliance frameworks and security best practices.

Required skills

• Microsoft SCCM
• Microsoft Intune
• PowerShell scripting
• OS deployment (MDT, WDS)
• Patch management
• Software packaging
• Compliance frameworks
• Security best practices
• Nanoheal (optional)
• IBM BigFix (optional)
• ManageEngine (optional)
• Zenworks (optional)