Sr. Service Engineer

Key Responsibilities

Support and administerMicrosoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune environments, including policies, configurations, collections/groups, and deployments.

Create, modify, test, deploy, and maintain endpoint configurations and policies in MECM and Intune.

Deploy and troubleshoot enterprise applications through MECM and Intune across a large Windows endpoint environment.Support and troubleshoot Windows Autopilot provisioning, including profile assignments, Enrollment Status Page (ESP), application installation, and enrollment failures.

SupportWindows operating system deployment (OSD), feature updates, quality updates, and configuration changes.Implement and maintain endpoint security configurations using Intune security policies, security baselines and BitLocker.Monitor and remediate device compliance, configuration, patching, and security posture to meet organizational standards.Support vulnerability remediation and endpoint hardening initiatives by deploying required configurations, patches, applications, and remediation scripts.Monitor endpoint health and troubleshoot client issues related to MECM agents, Intune enrollment, policy processing, application deployments, Windows Updates, and device compliance.Troubleshoot complex endpoint deployment and configuration issues using relevant MECM/Intune logs, Windows Event Logs, and diagnostic tools.Develop and maintain PowerShell scripts for endpoint administration, troubleshooting, reporting, and automation.Collaborate with regional IT/service desk teams, security teams, application owners, and infrastructure teams to resolve endpoint-related issues.Participate in on-call/support rotations as required and maintain technical documentation for configurations, deployments, operational procedures, and troubleshooting.

Required Skills3-5 years of hands-on experience with Microsoft MECM/SCCM and/or Microsoft Intune, with strong practical experience in at least one and working knowledge of the other.Hands-on experience with:MECM application/package deploymentIntune application deploymentConfiguration profiles and compliance policiesWindows AutopilotWindows Update management / patchingDevice enrollment and provisioningEndpoint troubleshootingPowerShell scriptingGood understanding of Microsoft Entra ID (Azure AD), device identities, GroupPolicy, security groups, and Conditional Access concepts.Good understanding of Windows 10/11 endpoint administration and troubleshooting.Ability to analyze deployment failures using MECM client logs, Intune diagnostics, Windows Event Viewer, and registry/configuration data.