L2 System Engineer
First seen by Alion on Sep 25, 2026.
The Role:
As a vital part of the Managed Services and Operations team, you'll take the lead in standardising, configuring, and automating provisioning, remediation, updates, and roadmaps for desktop environments - particularly using Microsoft Intune, SCCM, Autopilot, and related tools.
Role Responsibilities:
- Develop and maintain standards and best practices for OSD/SOE, Intune, and application deployment across large enterprise environments.
- Design, audit, and optimise end-to-end deployment solutions, from AutoPilot based provisioning to SCCM-driven SOE rollouts.
- Ensure patch compliance and system updates across client environments using Intune update rings or SCCM.
- Lead pilot rollouts, driver updates, application packaging, and image management.
- Act as an escalation point for complex issues from the Managed Services and Operations teams.
- Support application lifecycle management via Windows Store and SCCM.
- Work closely with cross-functional teams including Network, Product Engineering, and Automation to create and maintain service catalogue items and automation scripts.
- Contribute to knowledge sharing and training within the wider team.
- Help clients transition toward a modern hybrid infrastructure, recommending the best approach (Intune/AutoPilot vs SCCM/SOE) on a per-device basis.
Required Skills & Experience:
- 5+ years of experience in Endpoint Management within enterprise environments.
- Expert-level knowledge of Wintel environments and a broad range of infrastructure technologies.
- Proven experience with SCCM, including SOE builds, device updates, and application deployment.
- Advanced proficiency with Microsoft AutoPilot and Intune MDM for modern device management.
- Strong understanding of automation capabilities within SCCM and Intune, including API integrations and scripting (e.g., PowerShell).
- In-depth knowledge of patch management using Intune, SCCM, or similar endpoint management tools.
- Familiarity with Tanium or similar endpoint security platforms.
- Experience acting as the final escalation point for complex, high-impact technical issues.
- Strong skills in root cause analysis and problem resolution.
- Solid ITSM queue management abilities and a disciplined approach to ticket handling.
- Experience conducting technical workshops and knowledge sharing sessions with both clients and internal teams.
- Willingness and ability to travel to client sites for hands-on support when required.
- A proactive, "do-what-it-takes" attitude with a customer-first mindset.
- Relevant industry certifications (such as Microsoft, ITIL, or equivalent) are highly desirable.
Desirable Skills & Experience:
- Subject matter expertise (SME) in Intune, with deep technical knowledge and hands-on experience.
- Previous experience working in an outsourced service delivery environment or Managed Service Provider (MSP) setting.
- Solid understanding of ITIL principles and service management methodologies.
- Practical experience with cloud platforms, particularly Microsoft Azure and/or AWS.
- Working knowledge of networking fundamentals, including Azure networking components, and familiarity with SQL administration, SQL Reporting Services, PowerBI and Graph API.
- Microsoft 365 certifications or equivalent industry-recognised credentials.
Skills
SCCM, PowerShell, Windows Server, Tanium, MS Intune, Endpoint Detection & Response, Unified Endpoint Management