Senior Endpoint Engineer (ConfigMgr and Intune)

Location: Remote within Europe (CET working hours)
Start: ASAP
Contract: Initial 6-month contract with potential extension

About the Role

We are looking for a highly experienced Senior Endpoint Engineer to support a large-scale Digital Workplace transformation programme.

The programme is moving a global Windows estate of approximately 29,000 devices from on-premises management to Microsoft Intune.

The project has two key objectives:

1. Transition production devices from Group Policy and SCCM to Intune management through co-management, with orchestration, validation, and rollback processes fully tested before production rollout.
2. Deliver and operationalise Windows Autopilot provisioning, ensuring it becomes the standard method for building and deploying Windows devices, including Windows Hello for Business, compliance, and security services from first sign-in.

This is a hands-on delivery role. You will design, build, test, document, troubleshoot, and deploy solutions. You will work closely with a Senior Intune Architect while owning the technical delivery of co-management, migration orchestration, rollback processes, task sequences, and application packaging.

Key Responsibilities

• Configure and manage SCCM/Intune co-management, including pilot collections, workload transitions, client settings, and Cloud Management Gateway implementation.
• Build, test, and support Windows 11 deployment task sequences, including BIOS-to-UEFI conversion, firmware management, ConfigMgr client removal, and Autopilot hand-off.
• Package and deploy Intune Win32 applications, including dependency chains, requirement rules, certificate readiness validation, VPN clients, security tooling, and endpoint management components.
• Build and maintain migration orchestration solutions using PowerShell and Microsoft Graph, including device wave management, Entra ID group automation, SCCM collection management, and rollout runbooks.
• Design, test, and execute rollback procedures for all migration stages.
• Perform reconciliation across Active Directory, Entra ID, Intune, and SCCM environments following migration waves.
• Support pilot deployments, production migrations, and hypercare activities.
• Validate Delivery Optimization and Connected Cache performance for bandwidth-constrained environments.
• Produce operational documentation, SOPs, runbooks, knowledge articles, readiness reports, and handover documentation.

Mandatory Requirements

Candidates must demonstrate:

• 7+ years of hands-on SCCM / ConfigMgr engineering experience in enterprise environments with 10,000+ managed devices.
• Proven experience delivering large-scale Windows migration programmes, including readiness assessments, deployment waves, rollback planning, hypercare support, and operational runbooks.
• Experience implementing and supporting SCCM/Intune co-management in production environments.
• Experience troubleshooting workload transitions and client-side configuration issues.
• Strong expertise building OSD task sequences, including Windows 11 deployments, BIOS-to-UEFI conversion, driver management, and firmware deployment.
• Hands-on experience with Intune Win32 application packaging, dependency management, requirement rules, and enterprise application deployment.
• Advanced PowerShell scripting skills.
• Strong experience using Microsoft Graph across Entra ID, Intune, and Autopilot environments.
• Experience producing operational documentation and transitioning solutions into support teams.

Please Note

This role is not suitable for candidates:

• Whose SCCM experience is primarily operations, support, or BAU administration.
• Whose largest supported environment was under 10,000 endpoints.
• Without proven experience delivering large-scale endpoint migration or transformation programmes.
• Without strong hands-on experience in Intune, Autopilot, PowerShell, and enterprise-scale automation.

Nice to Have

• Windows Autopilot Hybrid Join troubleshooting.
• Lenovo firmware management via WMI.
• PatchMyPC.
• KQL and/or Power BI reporting.
• Experience working in regulated environments.
• Microsoft MD-102 certification.

Key Technologies

Microsoft Intune, SCCM / MECM / ConfigMgr, Windows 11, Windows Autopilot, Microsoft Graph, PowerShell, Entra ID, OSD Task Sequences, Win32 Application Packaging, Co-Management, Cloud Management Gateway, Active Directory.