Description

Own the global endpoint architecture, driving the migration from legacy SCCM to Intune-first management while ensuring security compliance and hardware lifecycle efficiency.

This role is hybrid.

Responsibilities

• Evolve Windows 11 and macOS endpoint configuration using Intune policies, compliance profiles, and Windows Autopilot for zero-touch deployment.
• Manage and gradually displace legacy SCCM systems, handling task sequences and ADRs while transitioning to modern management.
• Lead hardware engineering by benchmarking, certifying, and procuring laptop and desktop models against performance and security criteria.
• Own end-to-end patch management for the estate, including monthly updates, third-party patching, and compliance reporting.
• Configure and maintain Zscaler (ZIA/ZPA) policies, ensuring secure access via Conditional Access and SSL inspection.

Required Skills

• Strong hands-on experience with Windows 11 endpoint management in large enterprise environments.
• Expertise in Microsoft Intune: policy authoring, app management, configuration baselines, and Autopilot deployment.
• Working knowledge of SCCM/MECM as a legacy platform, including software distribution and co-management.
• Hands-on Zscaler administration: ZIA, ZPA policy configuration, and Zscaler Client Connector (ZCC) troubleshooting.
• Experience with hardware evaluation, benchmarking, and certification for enterprise devices (e.g., HP, Dell).
• Proficiency in PowerShell for automation and scripting endpoint management tasks.
• Understanding of security baselines (CIS/NIST) and integration with InfoSec policies.

Preferred Skills

• Experience with macOS endpoint management and policy enforcement.
• Familiarity with device health monitoring tools like Nexthink and Freshservice.

Key Skills

Education

Bachelor's degree