Modern Workplace Endpoint Engineer

As a Modern Workplace Endpoint Engineer, you will help design, build and operate enterprise endpoint-management and device-migration capabilities for a complex international separation programme. You will work hands-on with Microsoft Configuration Manager (MECM), Windows 11 imaging and Operating System Deployment, application packaging, patch management, device staging and IT Corner services. Working across multiple countries and alongside infrastructure, network, identity, security and service-management teams, you will support pilots and controlled migration waves while ensuring endpoint security, asset accuracy, operational readiness and uninterrupted service for end users.

Come join us:

You will be joining the Workplace Engineering Practice team with the best of Modern Workplace Consultants, focused on advancing the state of the art in the Modern Workplace Solution areas. Specifically, our goals are to drive customer adoption through Technical Leadership on the most strategic, complex and transformative consulting projects. Our team is at the forefront of innovation, driving value across the entirety of the customer’s digital journey through repeatable and customised cutting-edge solutions powered by the Microsoft Cloud. By joining our team you’ll have the opportunity to contribute to life-changing innovations that impact billions of people worldwide.

What you’ll do:

• Design, build and validate Microsoft Configuration Manager (MECM) environments, including SQL databases, site system roles, boundaries, discovery, Distribution Points, Management Points, PXE, certificates and role-based administration.

• Create and maintain Windows 11 light images and MECM Operating System Deployment task sequences, integrating drivers, corporate applications, endpoint security agents, encryption, browser and Microsoft Office hardening, and AppLocker controls.

• Review application inventories and import, adapt or repackage country-specific applications using agreed packaging standards and repositories, validating content distribution and hardware compatibility.

• Prepare and validate IT Corner and device-staging capabilities, including technical workstations, secure storage, imaging connectivity, NAC exceptions and end-to-end integration with DNS, DHCP, Active Directory, PKI, KMS, network and security services.

• Plan and execute country pilots and controlled migration waves, including device assessment, user appointments, preparation and handover, Swap-and-Remaster rotation, first-login checks, hypercare and management of engineering, departmental, loan and hardware-refresh exceptions.

• Operate and troubleshoot endpoints and MECM services, supporting patching through WSUS and Patch My PC, client health, application deployment, device diagnostics, remastering, warranty coordination, stock and loan-device management.

• Maintain accurate asset, peripheral and ownership records in source and target CMDBs; reconcile migrated, returned, wiped, reimaged, retired and in-stock devices throughout the programme.

• Produce architecture, detailed design, deployment, installation, test, operational, disaster recovery, training and handover documentation, and collect evidence against agreed acceptance criteria.

• Coordinate delivery across multiple countries and work effectively with Client Management, End User Support, Network, Hosting, IAM, Security, Service Desk and local site teams, while protecting business and service continuity.