We are seeking a Senior Endpoint Engineer to join our team.

In this role, you will engineer, enhance, and support Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. You will leverage your technical expertise and operational discipline to ensure stable, secure, and efficient end-user computing across the organization.

Responsibilities

• Deliver technology and products according to the roadmap, ensuring timely and high-quality outcomes
• Provide expert advice, guidance, and direction to execute plans and procedures, supporting schedule attainment and adherence to product development processes
• Serve as the last tier of support for operations and support teams, conducting root cause and preventative analysis
• Act as an escalation point for the Desktop Operations team and all matters related to End User Computing, with a focus on Endpoint Security Protection and application management
• Collaborate with other Engineering teams to develop integrated solutions
• Manage the Azure Virtual Desktop (AVD) environment, including image creation, VM deployment, and performance monitoring
• Develop automated solutions for deploying software packages, application patches, updates, and workstation images
• Engineer and support multiple Windows desktop images
• Oversee the lifecycle management of global standard desktop and laptop models
• Design and implement Microsoft Intune solutions to meet end user requirements
• Create and manage Intune policies for application deployment, device compliance, and security configurations
• Ensure seamless integration with other Microsoft 365 services
• Design and deploy Windows 11 provisioning processes using Intune Autopilot, configure Windows Update for Business policies, and maintain standardized deployment images
• Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies, collaborating with the Active Directory team
• Implement security best practices and compliance policies within Intune, monitor and respond to security incidents related to mobile devices and endpoints
• Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings
• Maintain desktop images and modify SCCM task sequences as needed
• Package, test, and deploy new applications as required
• Maintain and expand the existing Knowledge Base
• Create and update support documents to uphold high standards in End User Computing service delivery

Requirements

• At least 3 years of experience designing and implementing Microsoft Intune solutions and working as a system engineer
• Desktop engineering and support experience in an enterprise environment
• Proven expertise with Windows 11, Active Directory structure, and Group Policy management
• Experience developing and testing software packages using InstallShield or similar tools
• Skills in managing VDI environments, with preference for Azure Virtual Desktop
• Advanced knowledge in Endpoint Protection Engineering
• Proficiency in MECM and Intune for endpoint management
• Strong patch management skills, including bios and firmware updates, service pack upgrades, and application-based updates
• Basic database administration experience, especially with SQL Server
• Effective written and verbal communication skills
• Strong organizational and problem-solving abilities
• Excellent teamwork skills and motivation for professional growth
• Fluent English skills (written and spoken) at a B2+ level or higher

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn