{"id":64920,"url":"https://alion.io/job/swissquote-endpoint-engineer","title":"Endpoint Engineer","company":{"id":13960,"name":"Swissquote","domain":"swissquote.com","url":"https://alion.io/company/swissquote","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Support","role_family":"Support","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gland, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":110000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":611},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Room","optional":false},{"name":"Service Desk","optional":false},{"name":"Windows","optional":false},{"name":"Bash","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-08-20T08:04:17Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-17T14:04:52Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":58},"description":"At Swissquote, we’re all in.\nAll in to shake things up. All in to build the bank people actually want to use. All in to make finance less boring - and a lot more powerful.\nWe’re Switzerland’s leading digital bank - 1,400+ people across Europe, the Middle East and Asia, building real financial solutions for over a million clients worldwide. From trading and investing to everyday banking, we cover the full picture. We move fast, but we build things we’re genuinely proud of. Have a look behind the scenes by checking Humans of Swissquote on Instagram.\nGrowing fast creates room. Room to try things, own things, and grow at a pace most places can’t offer. Whether you like the spotlight or prefer to just put your head down and do great work, there’s space for both here.\nWe’ve ditched the dress code - but never the chance to celebrate. Big win or small, we make it count. The kind of place where the atmosphere takes care of itself.\nAs an equal opportunity employer, we welcome candidates from all backgrounds, experiences and perspectives to join our team and contribute to our shared success.\nFeeling it? It’s a good start. Apply.\n The Endpoint Engineer is a key member of the Endpoint Administration & Protection team, responsible for the management, compliance, protection and lifecycle of corporate endpoints across the organisation. The role brings specialist expertise in macOS and mobile platforms including iOS, iPadOS and Android, complementing the team's existing Windows capabilities. Working primarily with Microsoft Intune and Microsoft Defender for Endpoint, the Endpoint Engineer ensures that endpoints remain secure, compliant, operational and aligned with business and security requirements. The successful candidate is curious, adaptable and proactive, continuously seeking opportunities to improve the endpoint experience, increase automation and strengthen endpoint security posture.\nmacOS and Mobile Device Management\nAct as the primary technical specialist for macOS, iOS, iPadOS and Android endpoint management.\nDesign, implement and maintain device management capabilities using Microsoft Intune and platform-native technologies.\nManage Apple Business Manager integration, Automated Device Enrollment (ADE) and Apple device lifecycle processes.\nManage Android Enterprise enrollment models and operational administration.\nEnsure devices are enrolled, compliant, properly configured and supported throughout their lifecycle.\nTroubleshoot complex device management, enrollment and configuration issues across supported platforms.\nProvide technical guidance and documentation for endpoint administrators, Service Desk teams and stakeholders.\nIntune Compliance and Configuration Management\nDesign, implement and maintain Microsoft Intune configuration profiles, device restrictions and endpoint management policies.\nDevelop and maintain device compliance policies and compliance reporting across all supported platforms.\nSupport integration between compliance policies and Conditional Access controls in collaboration with Identity and Information Security teams.\nMaintain enrollment methods and provisioning workflows, including awareness of Windows Autopilot processes and integration points.\nMonitor platform health, configuration drift and policy effectiveness.\nContinuously evaluate new Microsoft Intune capabilities and recommend adoption where business value exists.\nEndpoint Protection and Microsoft Defender for Endpoint\nOwn the operational health and enforcement of Microsoft Defender for Endpoint across Windows, macOS and mobile platforms.\nEnsure Defender onboarding, deployment, policy assignment, reporting and agent health remain at target service levels.\nImplement and maintain endpoint security controls defined by Information Security.\nMonitor protection coverage, health status and deployment gaps across the endpoint estate.\nProduce operational reporting and remediation plans for non-compliant or unprotected devices.\nCollaborate with Security Operations during investigations requiring endpoint visibility or remediation actions.\nMaintain endpoint protection platforms to supported and secure versions.\nInformation Security defines security standards, baselines and control requirements. This role is responsible for implementing, enforcing, operating and maintaining those controls on endpoint platforms and reporting on compliance, coverage and operational gaps.\nApplication Packaging and Deployment\nPackage, test, deploy and maintain applications through Microsoft Intune for both Windows and macOS devices.\nManage Win32 applications, MSI deployments, executable wrappers, Microsoft Store applications, Line-of-Business applications and macOS application packages.\nDevelop deployment strategies that minimise user disruption and maximise reliability.\nManage application lifecycle processes including onboarding, updating, supersedence, retirement and removal.\nSupport update rings and deployment strategies for operating systems and applications.\nMaintain documentation, testing procedures and deployment standards.\nOperations and Continuous Improvement\nMonitor service health, platform performance and compliance metrics across endpoint technologies.\nInvestigate root causes of recurring issues and implement permanent corrective actions.\nIdentify opportunities for automation, simplification and service improvement.\nMaintain accurate technical documentation, standards and operational procedures.\nParticipate in incident resolution, problem management and change processes.\nStay current with Microsoft roadmap developments, endpoint security trends and modern management practices.\nTake ownership of problems and initiatives through to completion, ensuring solutions are documented and operationally sustainable.\n 4+ years of experience in endpoint engineering, endpoint administration or modern workplace management roles.\nStrong hands-on experience with Microsoft Intune administration and endpoint management.\nExperience managing macOS devices in enterprise environments.\nExperience managing iOS, iPadOS and Android devices using enterprise MDM solutions.\nStrong understanding of device compliance policies, configuration profiles and enrollment methods.\nExperience implementing and operating Microsoft Defender for Endpoint.\nExperience with application packaging and deployment for Windows and macOS platforms.\nKnowledge of Microsoft Entra ID and Conditional Access integration.\nExperience troubleshooting endpoint, operating system and device management issues.\nStrong documentation and operational process discipline.\nExcellent communication and stakeholder management skills.\nDesirable Skills\nScripting experience using PowerShell, Bash, Mac Shell Scripts or Python.\nExperience with Apple Business Manager and Automated Device Enrollment.\nExperience with Windows Autopilot.\nExperience with Jamf Pro or comparable Apple management platforms.\nExperience with endpoint automation and reporting using Microsoft Graph.\nFamiliarity with security operations processes and endpoint incident response.\nMicrosoft MD-102 certification.\nMicrosoft security, endpoint management or modern workplace certifications.\nMindset, Behaviours and Ways of Working\nWe are looking for someone who combines strong technical capability with a continuous improvement mindset.\nDynamic and adaptive, comfortable working in environments where technology, security requirements and business priorities evolve frequently.\nDemonstrates a growth mindset by actively learning new technologies and continuously improving professional knowledge.\nNaturally curious and focused on understanding root causes, not simply addressing symptoms.\nTakes initiative, identifies improvement opportunities and follows them through to completion.\nDemonstrates ownership and accountability for operational outcomes.\nApproaches incidents and challenges as opportunities to learn and strengthen services.\nCommunicates clearly with technical and non-technical stakeholders.\nCollaborates effectively across engineering, security and support teams.\nMaintains a strong customer and service-oriented mindset while balancing risk and security requirements.\nWhat We Offer\nThe opportunity to work with modern endpoint management and security technologies at enterprise scale.\nA collaborative engineering culture that values ownership, curiosity and continuous improvement.\nExposure to cross-functional initiatives involving Information Security, Security Operations and Workplace Technology teams.\nOpportunities for professional development, certification and ongoing technical learning.\nThe ability to influence endpoint strategy, platform evolution and service improvement initiatives.\nFlexible ways of working and a supportive team environment focused on knowledge sharing and engineering excellence.\n Please note that Swissquote never requests sensitive personal information or payment of any kind during the recruitment process. Any such request is fraudulent.\nSQ2","description_format":"text","description_chars":8964,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Commercial & Retail Banks","Custody & Fund Administration","Forex & CFD Brokers"],"lifecycle":[{"event":"open","at":"2026-08-20T08:04:17Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.5,"p_room":0.35,"age_days":57,"expected_fill_days":28,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/swissquote-endpoint-engineer","json_url":"https://alion.io/job/swissquote-endpoint-engineer.json","meta":{"generated_at":"2026-10-17T14:18:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19192,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13960},"rest":"https://alion.io/mcp/rest/get_company?id=13960"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fswissquote-endpoint-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fswissquote-endpoint-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fswissquote-endpoint-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/swissquote-endpoint-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fswissquote-endpoint-engineer"}]}