{"id":1602954,"url":"https://alion.io/job/fitch-endpoint-engineer","title":"Endpoint Engineer","company":{"id":1843543,"name":"Fitch Group","domain":"fitch.group","url":"https://alion.io/company/fitch-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Support","role_family":"Support","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":80000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":469},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Claude Code","optional":false},{"name":"Copilot","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"LM Studio","optional":false},{"name":"LocalAI","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Ollama","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Service Desk","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-01T02:01:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-06T00:57:16Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Fitch Group is currently seeking a Endpoint Engineer based out of our London office.\nAs a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst.\nFitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference.\nWant to learn more about a career in technology and data at Fitch? Visit:\nhttps://careers.fitch.group/content/Technology-and-Data/?locale=en_US\nAbout the role:\nThe Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles.\nHow You’ll Make an Impact:\nEndpoint Platform Engineering (Windows CSP / Intune)\nOwn the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture.\nDesign and maintain consolidated, well-governed CSP policy structures across the fleet.\nHardware Fleet & Device Lifecycle\nDrive vendor-led firmware and driver lifecycle management - including HP Image Assist and Dell Command Update automations - to improve device stability and end-user experience.\nTroubleshoot and remediate audio, video, and conferencing reliability issues.\nPerform hardware and performance testing/benchmarking to support fleet standardization decisions.\nAutopilot & Provisioning Modernization\nModernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency.\nResolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline.\nComplete remaining GPO-to-CSP transitions in support of provisioning consistency.\nApplication & Configuration Management\nPackage, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements.\nCollaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives.\nDeveloper Tooling & AI Workload Enablement\nConfigure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards.\nDefine and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing.\nPartner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (e.g., Claude Code, Copilot) within governance and device-management guardrails.\nOperations & Support\nDeliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination.\nExecute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.\nPartner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement.\nParticipate in an on-call rotation to support critical after-hours incidents or high-priority escalations.\nDocumentation & Cross-Functional Collaboration\nCreate and maintain technical documentation, runbooks, and cross-team knowledge resources.\nEngage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management.\nAct as an owner by proactively driving issues to resolution across business \nYou May be a Good Fit if:\n3-5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in:\nWindows 11, Azure AD / Entra ID\nMicrosoft Intune (Endpoint Manager), MECM, and co-management services\nActive Directory and Directory Services, including Group Policy and RSAT tools\nIntune configuration and compliance policy management\nLAPS and least-privilege / privilege elevation models (e.g., Privilege Management)\nMicrosoft 365 Apps deployment, configuration, and update servicing\nNetworking fundamentals (DNS, DHCP, VPN, Proxy)\nStrong experience with modern Intune management, including:\nWindows Autopilot (user-driven, pre-provisioning, self-deploying)\nZero-touch provisioning and cloud-first imaging strategies\nIntune application management (Win32, MSI, MSIX, store apps, managed apps)\nSettings Catalog, Compliance Policies, and Configuration Profiles\nDevice Filters, Dynamic Groups, and scalable targeting strategies\nEndpoint Analytics and digital experience monitoring (DEX)\nHardware validation and lifecycle management, including:\nHardware and performance testing/benchmarking to support fleet standardization decisions\nFirmware and BIOS update management and deployment (e.g., HP, Dell)\nWi-Fi driver troubleshooting and remediation across the device fleet\n802.1X / WPA2-Enterprise network authentication troubleshooting (EAP-TLS, RADIUS)\nProficiency with Windows PowerShell, including:\nRunning, creating, and editing PowerShell scripts\nManaging system processes and services via PowerShell\nUnderstanding basic command syntax and parameters\nTroubleshooting errors using PowerShell\nExperience supporting Zero Trust, conditional access, and identity-based access controls.\nDeveloper tooling and AI workload support, including:\nConfiguring and troubleshooting VS Code, Python, and common CLI/developer environments\nGit-based version control workflows\nEndpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing)\nApplying governance and device-management guardrails to developer and AI tooling without blocking productivity\nAbility to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks.\nDemonstrated ownership mindset, with a focus on eliminating root causes and improving user experience.\nWhat Would Make You Stand Out:\nPowerShell App Deployment Toolkit (PSADT) - creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic.\nAdvanced MECM collection design and query creation.\nWindows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed).\nFamiliarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN).\nExperience with third-party patching platforms (e.g., Patch My PC).\nStrong PowerShell automation expertise and familiarity with Git-based workflows.\nExperience with vulnerability management tools and endpoint telemetry/observability platforms.\nExperience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU-accelerated workstations.\nMicrosoft certifications related to Endpoint, Azure, or Security.\nWhy Choose Fitch:\nHybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location \nA Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity \nInvesting in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals \nPromoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind \nSupportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively \nDedication to Giving Back: Paid volunteer days and support for community engagement initiatives \nAt Fitch, AI is embedded in how we work every day-supporting smarter decision-making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day-to-day operations, helping teams work more efficiently and think differently as we continue to evolve. We’re looking for colleagues who are comfortable operating in an AI-enabled environment-or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done.\nFitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interests or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work.\nFitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.\n#LI-HYBRID #LI-KC1","description_format":"text","description_chars":10673,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Hybrid work","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-01T19:36:45Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.887,"p_room":1,"age_days":4,"expected_fill_days":25,"reasons":["conf:5","velocity","win:early","comp:brand"],"computed_at":"2026-10-05T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/fitch-endpoint-engineer","json_url":"https://alion.io/job/fitch-endpoint-engineer.json","meta":{"generated_at":"2026-10-06T02:20:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3475,"day_limit":5000,"remaining_today":1525,"minute_limit":60,"resets_at":"2026-10-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1843543},"rest":"https://alion.io/mcp/rest/get_company?id=1843543"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffitch-endpoint-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffitch-endpoint-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffitch-endpoint-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fitch-endpoint-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffitch-endpoint-engineer"}]}