{"id":2159676,"url":"https://alion.io/job/jonathan-marsh-windows-endpoint-engineer","title":"Windows Endpoint Engineer","company":{"id":3912411,"name":"Marsh","domain":"marsh.io","url":"https://alion.io/company/marsh-io","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Support","role_family":"Support","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-09T07:50:49Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-09T23:49:16Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Company:\nMarshDescription:\nWe are seeking a talented individual to join our Colleague Tech team at Marsh. This role will be based in Pavilion Damansara, Kuala Lumpur. This is a hybrid role that has a requirement of working at least three days a week in the office.\nWindows Endpoint Engineer\nAs a Specialist in Windows Endpoint Engineering, you will help design, engineer and continuously improve the global Windows endpoint platform supporting approximately 95,000 colleagues across a complex enterprise environment.\nYou will work across modern device management, Windows deployment and servicing, application delivery, endpoint security and compliance, hardware lifecycle, automation and digital employee experience. You will collaborate with security, identity, network, application, service management and regional support teams to deliver reliable, secure and user-focused solutions.\nYou will also provide technical leadership for complex incidents and engineering changes, produce clear documentation and standards, and use telemetry and colleague feedback to improve endpoint performance, reliability and experience.\nWhat can you expect:\nA global engineering role supporting approximately 95,000 colleagues and a diverse Windows device estate.\nThe opportunity to shape modern Windows management using Microsoft Intune, Entra ID, Windows Autopilot, Windows Update for Business and related cloud services.\nWork spanning endpoint build, configuration, application experience, hardware standards, security, compliance, automation and digital experience.\nAn open, collaborative engineering culture focused on standardisation, measurable service improvement and colleague outcomes.\nWe will rely on you to:\nEngineer and maintain the enterprise Windows endpoint platform, including laptops, desktops, virtual endpoints and specialist device configurations.\nDesign and support modern provisioning and lifecycle workflows using Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only device scenarios.\nManage Windows configuration, feature updates, quality updates, servicing rings, drivers, BIOS, firmware, UEFI and supporting hardware standards.\nEngineer and improve application packaging, deployment, update and remediation processes, working with application owners to reduce compatibility and colleague-experience issues.\nImplement and maintain endpoint security and compliance capabilities, including BitLocker, Secure Boot, Defender controls, Windows Hello for Business and security baselines.\nUse PowerShell, Microsoft Graph and workflow automation to remove manual effort, improve control and integrate endpoint services with platforms such as ServiceNow.\nUse endpoint telemetry and digital employee experience data to identify trends, assess change impact and proactively improve device health, performance and reliability.\nLead technical investigation and root-cause analysis for complex tier III incidents, engaging Microsoft and other technology vendors where required.\nTranslate business, colleague, security and operational requirements into technical designs, implementation plans, testing approaches and production acceptance criteria.\nCreate and maintain roadmaps, standards, engineering guides, release documentation, support knowledge and operational handover materials.\nContribute to peer reviews, technical governance, proof-of-concept activity and continual improvement across the global endpoint engineering service.\nWhat you need to have:\nStrong experience engineering and supporting Windows 11 endpoints in a large, distributed enterprise environment.\nHands-on experience with Microsoft Intune, Entra ID, Windows Autopilot and cloud-based Windows configuration and compliance.\nExperience with Windows deployment, servicing, recovery and troubleshooting, including feature updates, quality updates, drivers and firmware.\nStrong knowledge of application deployment, update management and compatibility troubleshooting for Microsoft 365 Apps and enterprise Windows applications.\nPractical PowerShell automation skills and experience working with APIs, Microsoft Graph or structured data formats such as JSON, XML and CSV.\nGood understanding of endpoint security, identity, compliance and access controls, including BitLocker, Secure Boot and Windows Hello for Business.\nAbility to analyse complex technical problems, communicate clearly with technical and non-technical stakeholders, and produce high-quality engineering documentation.\nWhat makes you stand out:\nDeep experience with Microsoft Intune, Entra ID, Windows Autopilot, Windows Update for Business and modern management migration.\nExperience engineering Windows 11 at scale, including deployment, in-place upgrades, update rings, application compatibility and rollback or recovery strategies.\nAdvanced PowerShell skills, with experience using Microsoft Graph, proactive remediations, Azure Automation or comparable workflow tooling.\nKnowledge of endpoint analytics or digital employee experience platforms and the ability to turn telemetry into prioritised engineering improvements.\nExperience integrating endpoint management data and workflows with IT service management or hardware asset management platforms such as ServiceNow.\nStrong knowledge of device security controls, Microsoft Defender capabilities, security baselines, certificates, authentication and conditional access dependencies.\nExperience evaluating enterprise laptop hardware, drivers, BIOS and firmware, including Intel and Windows on Arm device considerations.\nUnderstanding of legacy management technologies such as Active Directory, Group Policy and Microsoft Configuration Manager, together with experience transitioning services towards modern management.\nA record of producing clear technical standards, design documents, operational guidance and root-cause analysis for global services.\nExcellent collaboration and communication skills, with the confidence to work across engineering, security, operations, vendors and business stakeholders.\nA proactive, pragmatic and improvement-focused approach, with the ability to work independently and manage competing priorities.\nWhy join our team:\nWe help you be your best through professional development opportunities, interesting work and supportive leaders.We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.\nOur scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being\n\nMarsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.Marsh is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.","description_format":"text","description_chars":7865,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work","Professional development"],"hiring_locations":[{"name":"Malaysia","iso":"MY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-09T07:50:49Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":20,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-10-10T02:04:09Z"},"pay":null,"html_url":"https://alion.io/job/jonathan-marsh-windows-endpoint-engineer","json_url":"https://alion.io/job/jonathan-marsh-windows-endpoint-engineer.json","meta":{"generated_at":"2026-10-10T02:04:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3650,"day_limit":5000,"remaining_today":1350,"minute_limit":60,"resets_at":"2026-10-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3912411},"rest":"https://alion.io/mcp/rest/get_company?id=3912411"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjonathan-marsh-windows-endpoint-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjonathan-marsh-windows-endpoint-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjonathan-marsh-windows-endpoint-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jonathan-marsh-windows-endpoint-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjonathan-marsh-windows-endpoint-engineer"}]}