Senior Endpoint Engineer – Windows & Intune (EUC Engineer III)

Overview

Hands-on senior endpoint engineer on the End User Compute (EUC) team, delivering and improving device management, provisioning, automation and hardware lifecycle for enterprise Windows endpoints, with Mac administration encouraged.

What you'll do

• Maintain and enhance Microsoft Intune environments, including device enrolment, configuration, compliance and application management, keeping services secure, reliable and scalable.
• Develop and improve light-touch provisioning using Windows Autopilot, with minimal manual IT intervention and a robust setup experience.
• Configure and troubleshoot the interactions between Intune, Microsoft Entra ID, Windows Autopilot and Okta, working with identity teams on device provisioning, authentication and access.
• Plan and deliver endpoint migrations between Microsoft Entra ID tenants, managing dependencies, device transitions, user access, testing and communications while minimising disruption.
• Manage Windows update policies, deployment rings and operating system upgrades, including compatibility testing, pilot deployments, phased rollouts, compliance monitoring and remediation of failed updates.
• Package, test, deploy and maintain Windows applications, including installation and detection logic, dependencies, upgrades and removal.
• Use WinGet and other appropriate tools to improve application management and employee self-service.
• Develop reusable PowerShell scripts and automation to detect and remediate recurring endpoint issues, reduce manual administration and improve reporting, applying testing, logging and error handling.
• Collaborate with Security teams to manage endpoint vulnerabilities, maintain endpoint security tools and implement controls such as encryption, security baselines and local administrator restrictions.
• Provide L3 support for complex issues involving device enrolment, policy conflicts, application deployment, updates, authentication and device trust.
• Investigate root causes, coordinate vendor escalations and implement lasting fixes through established incident, problem and change management processes.
• Monitor and report on device health, patch and device compliance, provisioning success and application deployment outcomes, using findings to prioritise improvements and reduce recurring incidents.
• Contribute to the EUC roadmap and own assigned improvements from investigation and design through testing, implementation and operational handover, with clear rollout and recovery plans.
• Maintain technical documentation and runbooks, share knowledge, and provide training for technical teams and end users.

What you'll need

• Proven experience in a senior endpoint engineering or L3 EUC role, with strong hands-on administration and troubleshooting of enterprise Windows environments.
• Strong Microsoft Intune expertise across device enrolment, configuration profiles, compliance policies, application deployment, update management and troubleshooting.
• Practical experience implementing and supporting Windows Autopilot and automated device provisioning.
• Experience migrating Windows endpoints from one Microsoft Entra ID tenant to another, including planning, dependency assessment, execution and validation, with consideration for device enrolment, user profiles and data, authentication and application access.
• Experience managing Windows updates and operating system upgrades through controlled testing, deployment rings, compliance monitoring and remediation.
• Strong PowerShell scripting skills, with experience developing and maintaining scripts for endpoint administration, detection, remediation and reporting.
• Experience packaging and deploying Win32 applications, including installation contexts, detection rules, dependencies, upgrades and deployment failure investigation.
• Practical familiarity with WinGet.
• Experience managing endpoint hardware lifecycles, including asset records, warranty and support status, refresh planning, redeployment and secure decommissioning.
• A strong understanding of Microsoft Entra ID device identities, join types, groups and the relationship between device compliance and Conditional Access.
• A strong understanding of Okta or an equivalent identity provider (IdP), including single sign-on, multifactor authentication and user lifecycle management, with the ability to investigate endpoint-related authentication issues.
• Familiarity with Google Chrome browser management.
• Strong analytical and troubleshooting skills, using logs, testing and evidence to identify root causes, recognise recurring problems and verify solutions.
• A practical, service-focused approach, with a willingness to learn macOS administration and actively contribute to both Windows and Mac endpoint services.
• Strong communication skills in spoken and written English, with the ability to explain complex technical issues clearly to technical and non-technical audiences, provide timely updates on progress and risks, produce useful documentation and share knowledge effectively across global teams.

Nice to have

• Experience administering both Windows and macOS is highly valued.
• Enterprise macOS administration using Jamf Pro, including configuration profiles, application deployment, patching and troubleshooting.
• Familiarity with Apple Business Manager and Automated Device Enrolment.
• Experience using Microsoft Graph and REST APIs to automate endpoint administration, reporting and integrations.
• Experience with version control and maintaining shared scripts and technical documentation.
• Experience with endpoint detection and response, secure remote access or privileged access management tools.
• Experience implementing endpoint monitoring and telemetry tools to improve device reliability and employee experience.
• Familiarity with collaboration and service delivery platforms such as Jira, Slack and Zoom.
• Bash or shell scripting experience for macOS.
• Relevant certifications, such as Microsoft 365 Certified: Endpoint Administrator Associate, or relevant Jamf certifications.

Details

• Location: Bengaluru, KA, India.