Engineer IT Modern Workplace at Cargolux Airlines International S.A.

Luxembourg, , Luxembourg -

Full Time

Start Date

Immediate

Expiry Date

11 Oct, 26

Salary

0.0

Posted On

13 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Microsoft Intune, Entra ID, Microsoft Defender for Endpoint, Windows Autopilot, Apple Business Manager, Windows 365 Cloud PC, PowerShell Scripting, Application Packaging, MDM/MAM, CIS Security Baselines, Azure AD, Endpoint Security, Device Lifecycle Management, Vulnerability Management, Stakeholder Management, Project Lifecycle Management

Industry

Airlines and Aviation

Description

Tasks and Responsibilities: Endpoint Management & Modern Workplace * Lead the administration and evolution of Microsoft Intune (Endpoint Manager) for managing Windows, macOS, iOS, and Android devices. * Design and maintain device deployment solutions using Windows Autopilot and Apple Business Manager. * Define and implement device configuration, compliance, and security policies. * Manage the full lifecycle of enterprise devices, from provisioning and deployment to refresh and retirement. * Support and optimize Windows 365 Cloud PC services. Microsoft 365 & Identity Management * Act as the technical lead for endpoint and identity management services within Microsoft 365. * Manage and maintain Entra ID (Azure AD), including user lifecycle, group management, Conditional Access, and role assignments. * Collaborate with infrastructure, security, and business teams to deliver secure and efficient workplace solutions. * Contribute to the roadmap and continuous improvement of Modern Workplace technologies. Endpoint Security & Compliance * Lead the implementation and maintenance of endpoint security solutions using Microsoft Defender for Endpoint. * Define and enforce endpoint security and compliance standards based on CIS Security Baselines and company policies. * Monitor compliance and security posture, identify risks, and drive remediation activities. * Support security investigations and act as an escalation point for complex endpoint-related issues. Application & Mobility Management * Lead application packaging, testing, deployment, and lifecycle management through Intune. * Manage Mobile Device Management (MDM) and Mobile Application Management (MAM) solutions. * Ensure applications and mobile devices are deployed securely and comply with corporate standards. * Troubleshoot and resolve complex application deployment and endpoint management issues. Automation & Continuous Improvement * Develop and maintain PowerShell scripts to automate endpoint management and administrative tasks. * Identify opportunities to improve processes, increase automation, and enhance user experience. * Evaluate new technologies and features within the Microsoft ecosystem and recommend improvements. * Create and maintain technical documentation, standards, and operational procedures. Leadership & Governance * Serve as a subject matter expert for Intune, Entra ID, Defender for Endpoint, Windows Autopilot, and Windows 365. * Provide technical guidance and mentoring to team members. * Lead endpoint management projects and ensure successful delivery of technical solutions. * Promote best practices, governance standards, and continuous service improvement across endpoint services. Technical Skills - Technologies expertise: * Microsoft Intune / Endpoint Manager * Apple Business Manager * Windows Autopilot * Windows 365 Cloud PC * Microsoft 365 Administration * Entra ID (Azure AD) * Microsoft Defender for Endpoint * CIS Security Baselines * Endpoint Security & Compliance * Mobile Application Management (MAM) * PowerShell scripting * Application packaging and deployment * Enterprise device lifecycle management Essential Requirements For The Position: * Bachelor degree in IT. * 7 Years of Experience in the position described above. * Strong knowledge of CIS security standards for endpoint protection. * Experience delivering large-scale device deployments and workplace transformations. * Expert knowledge in End user device deployments on system side, including but not limited to: * Microsoft Intune * Airwatch * Apple Business Manager * On premise deployment (i.e. optimized end user experience, planification of deployment, organizing large scale deployment over multiple locations, ...) * Experience with Apple device administration in corporate environments. * Advanced troubleshooting and root cause analysis expertise. * Strong stakeholder and end-user relationship management skills. * Experience supporting cloud-first workplace environments. * Extensive knowledge in Azure Entra. * Knowledge in Vulnerability management and remediation on a Microsoft 365 level. * Excellent teamwork, time-management, and organizational skills. * High level of oral and written communication skills in English with the aim of providing effective support to IT technicians. * Experience in leading end-to-end project lifecycles. Working Conditions: * Permanent full-time position based in Luxembourg. * The candidate will work in an Agile, friendly, innovative & operational Azure only environment. * Normal office hours are to be expected, with occasional work outside these hours to perform tasks (planned or unplanned) on the environment. * The position holder might have to be on stand-by (on-call) outside the normal office hours and weekends in case of incidents. * It is expected that during critical incidents the candidate can commit to resolve the incident to the end if required. * Valid car drivers license required. * A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of positive selection.

Responsibilities

Lead the administration and evolution of Microsoft Intune and Entra ID to manage a secure, modern workplace across multiple device platforms. Oversee endpoint security, compliance standards, and the full lifecycle of enterprise devices including automation via PowerShell.