IT Support Engineer (EUC responsible and Intune SME)

Job Description

Role Overview

As a IT Support Engineer (EUC responsible and Intune subject matter expert), you will be a key member of our operational support team, delivering advanced technology solutions across our global enterprise environment. You will act as the primary technical owner for End User Computing area (based on Microsoft, Apple and Google) and subject matter expert on Microsoft Intune, managing business-critical device configurations and continuously improving the endpoint ecosystem for performance, security, and user experience.

We are looking for a person with substantial experience in managing end user devices in a remote workforce with deep knowledge of intune and main operating systems. Someone who can not only operate this area but develop it with drive and new initiatives to provide an excellent experience for a tech company with high standards. In this role, you will collaborate closely with Service Desk in Corporate IT, Infrastructure, and Security teams to refine our EUC roadmap, evaluate new technologies, and ensure secure and scalable configurations across our strategic platforms.

Job Responsibilities:

• Lead the area for EUC in all aspects of hardware choice, OS and browser management, security, privilege management, remote access, support and application delivery.
• Design, test, and deploy Windows Configuration Profiles, Compliance Policies, and Conditional Access rules within Microsoft Endpoint Manager (Intune).
• Manage and troubleshoot the Windows Autopilot deployment process to ensure a seamless "out-of-the-box" experience for remote new hires.
• Package, test, and deploy Win32 applications (.intunewin) and M365 apps, ensuring silent installs and reliable updates.
• Renew VPP & DEP tokens along with APNs certificate
• Oversee Windows Update rings and feature updates to ensure the fleet remains secure and compliant without disrupting user productivity.
• Act as the final escalation point for complex Windows OS, hardware (Lenovo and MacBook), and driver issues that Tier 1 and Tier 2 support cannot resolve.
• Perform deep-dive troubleshooting using Event Viewer, log analysis, and Sysinternals tools.
• Manage and troubleshoot device enrollment, compliance, and configuration profiles for various operating systems.
• Experience integrating Apple Business Manager (ABM) with Jamf PreStage Enrollments to automate the Out-of-Box Experience (OOBE).
• Provide advanced technical support to end-users, resolving complex hardware, software, and network issues.
• Conduct training sessions and workshops to ensure effective use of IT systems and tools.
• Serve as a point of escalation for challenging support tickets and service requests.
• Collaborate with the Infosec team to ensure the security and integrity of IT systems and endpoints through regular maintenance and updates.
• Manage device identity and hybrid-join states within Entra ID (Azure AD).
• Implement and monitor endpoint security policies, including BitLocker encryption, CrowdStrike for Endpoint, and local admin restriction policies (LAPS).
• Assist in the deployment, configuration, and maintenance of IT infrastructure, including servers, network devices, and workstations.
• Utilise PowerShell scripting to automate repetitive tasks & Bash/Zsh scripting for custom remediation.
• In-depth understanding of deployment technologies, to include, but not limited to AD DS, AD FS, AAD Connect, Identity & Access Management, MFA, RMS, AIP
• Create detailed technical documentation and Knowledge Base articles to empower IT support to handle routine Windows/Mac issues with Intune.