About the job

SME – Endpoint Management

Location: Birmingham, UK – 3 days per week onsite

Employment Type: Full Time

Security Clearance: BPSS active or SC eligible

Work Arrangement: Office-based / Hybrid

Role Overview

We are looking for an experienced SME – Endpoint Management professional with strong expertise in Microsoft Intune and enterprise endpoint management. The successful candidate will be responsible for designing, implementing, securing, and managing large-scale endpoint environments across Windows, macOS, iOS, and Android platforms.

Required Skills & Experience

• 5+ years of enterprise Endpoint Management experience using Microsoft Intune / Microsoft Endpoint Manager in large-scale environments.
• Strong hands-on expertise in:
• Microsoft Intune administration and architecture.
• Windows Autopilot, Apple Business Manager (ABM/DEP), and Android Enterprise.
• Configuration Profiles, Compliance Policies, Security Baselines, and Proactive Remediations.
• Endpoint Security, Conditional Access, Microsoft Defender for Endpoint, and Zero Trust principles.
• Win32 application packaging, IntuneWin, macOS package management, Apple VPP, and Managed Google Play.
• Windows Update for Business, Autopatch, Feature Update Management, and Quality Update Governance.
• Device encryption including BitLocker and FileVault.
• SCEP/PKCS certificates, Wi-Fi and VPN profiles.
• Microsoft Entra ID Device Management, Dynamic Groups, Device Filters, and RBAC.
• Advanced PowerShell scripting and automation skills; Microsoft Graph API experience preferred.
• Strong understanding of Endpoint Security, PKI, Identity Management, Networking, and Cloud Technologies.
• Experience designing and implementing enterprise-scale endpoint management solutions.
• Strong knowledge of ITIL processes, including Incident, Change, Problem, Release, and Service Management.
• Eligible for UK Security Clearance.

Preferred Skills

• Endpoint architecture and migration experience from Configuration Manager (SCCM/MECM) to Intune.
• Experience with Microsoft Autopatch, Defender for Endpoint, and Microsoft Security ecosystem integrations.
• Advanced KQL, Log Analytics, Workbooks, and endpoint reporting experience.
• Experience developing custom remediation, automation, and self-healing solutions.
• ServiceNow integration, CMDB management, and endpoint asset governance experience.
• Exposure to Microsoft Copilot for Security and AI-driven endpoint operations.
• Key Candidate Profile