Engineer IT Modern Workplace

Tasks and Responsibilities:

Endpoint Management & Modern Workplace

• Lead the administration and evolution of Microsoft Intune (Endpoint Manager) for managing Windows, macOS, iOS, and Android devices.

• Design and maintain device deployment solutions using Windows Autopilot and Apple Business Manager.

• Define and implement device configuration, compliance, and security policies.

• Manage the full lifecycle of enterprise devices, from provisioning and deployment to refresh and retirement.

• Support and optimize Windows 365 Cloud PC services.

Microsoft 365 & Identity Management

• Act as the technical lead for endpoint and identity management services within Microsoft 365.

• Manage and maintain Entra ID (Azure AD), including user lifecycle, group management, Conditional Access, and role assignments.

• Collaborate with infrastructure, security, and business teams to deliver secure and efficient workplace solutions.

• Contribute to the roadmap and continuous improvement of Modern Workplace technologies.

Endpoint Security & Compliance

• Lead the implementation and maintenance of endpoint security solutions using Microsoft Defender for Endpoint.

• Define and enforce endpoint security and compliance standards based on CIS Security Baselines and company policies.

• Monitor compliance and security posture, identify risks, and drive remediation activities.

• Support security investigations and act as an escalation point for complex endpoint-related issues.

Application & Mobility Management

• Lead application packaging, testing, deployment, and lifecycle management through Intune.

• Manage Mobile Device Management (MDM) and Mobile Application Management (MAM) solutions.

• Ensure applications and mobile devices are deployed securely and comply with corporate standards.

• Troubleshoot and resolve complex application deployment and endpoint management issues.

Automation & Continuous Improvement

• Develop and maintain PowerShell scripts to automate endpoint management and administrative tasks.

• Identify opportunities to improve processes, increase automation, and enhance user experience.

• Evaluate new technologies and features within the Microsoft ecosystem and recommend improvements.

• Create and maintain technical documentation, standards, and operational procedures.

Leadership & Governance

• Serve as a subject matter expert for Intune, Entra ID, Defender for Endpoint, Windows Autopilot, and Windows 365.

• Provide technical guidance and mentoring to team members.

• Lead endpoint management projects and ensure successful delivery of technical solutions.

• Promote best practices, governance standards, and continuous service improvement across endpoint services.

Technical Skills - Technologies expertise:

• Microsoft Intune / Endpoint Manager

• Apple Business Manager

• Windows Autopilot

• Windows 365 Cloud PC

• Microsoft 365 Administration

• Entra ID (Azure AD)

• Microsoft Defender for Endpoint

• CIS Security Baselines

• Endpoint Security & Compliance

• Mobile Application Management (MAM)

• PowerShell scripting

• Application packaging and deployment

• Enterprise device lifecycle management

Essential Requirements For The Position:

• Bachelor degree in IT.

• 7 Years of Experience in the position described above.

• Strong knowledge of CIS security standards for endpoint protection.

• Experience delivering large-scale device deployments and workplace transformations.

• Expert knowledge in End user device deployments on system side, including but not limited to:

  • Microsoft Intune
  • Airwatch
  • Apple Business Manager
  • On premise deployment (i.e. optimized end user experience, planification of deployment, organizing large scale deployment over multiple locations, ...)

• Experience with Apple device administration in corporate environments.

• Advanced troubleshooting and root cause analysis expertise.

• Strong stakeholder and end-user relationship management skills.

• Experience supporting cloud-first workplace environments.

• Extensive knowledge in Azure Entra.

• Knowledge in Vulnerability management and remediation on a Microsoft 365 level.

• Excellent teamwork, time-management, and organizational skills.

• High level of oral and written communication skills in English with the aim of providing effective support to IT technicians.

• Experience in leading end-to-end project lifecycles.

Working Conditions:

• Permanent full-time position based in Luxembourg.
• The candidate will work in an Agile, friendly, innovative & operational Azure only environment.
• Normal office hours are to be expected, with occasional work outside these hours to perform tasks (planned or unplanned) on the environment.
• The position holder might have to be on stand-by (on-call) outside the normal office hours and weekends in case of incidents.
• It is expected that during critical incidents the candidate can commit to resolve the incident to the end if required.
• Valid car drivers license required.
• A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of positive selection.