Endpoint Management Engineer (L2) – Intune & SCCM/MECM

Position summary:

We are looking for a skilled L2 System Administrator to support enterprise client platforms and endpoint management services. The role is responsible for endpoint administration, incident resolution, OS and application patching, software deployment, device compliance, troubleshooting and lifecycle management. The administrator will work closely with L1 support, L3 SMEs, Service Desk, Security and infrastructure teams to maintain endpoint availability and SLA compliance across global operations.

Key Responsibilities:

Endpoint & Device Management

• Provide L2 support for Windows endpoint incidents, device issues and service requests.
• Administer and troubleshoot endpoint management platforms such as Microsoft Intune and SCCM/MECM.
• Support device enrollment, configuration profiles, compliance policies and endpoint provisioning.
• Troubleshoot device registration, policy synchronization, application deployment and management issues.
• Support Windows Autopilot enrollment, device provisioning and lifecycle activities.

OS Patching & Application Management

• Execute approved Windows OS and application patching activities.
• Monitor patch compliance, investigate deployment failures and perform post-patching validation.
• Support application packaging, deployment, installation and troubleshooting.
• Manage software distribution, deployment collections and endpoint configuration baselines.
• Coordinate driver, firmware and feature update deployments as per approved procedures.

Endpoint Configuration & Compliance

• Monitor endpoint compliance against approved OS patching, encryption and configuration baselines.
• Support BitLocker encryption, device configuration policies and security baseline remediation.
• Investigate compliance failures, configuration deviations and policy application issues.
• Coordinate with the dedicated Defender/Security team for endpoint security-related incidents and remediation.
• Support device access controls and remediation of non-compliant endpoints.

 Operations & Service Management

• Resolve endpoint incidents and service requests within defined SLAs.
• Follow ITIL Incident, Problem, Change and Request Management processes.
• Troubleshoot complex endpoint issues and escalate platform-level problems to L3 SMEs.
• Maintain runbooks, operational documentation, incident records and shift handover notes.
• Coordinate with L1, Service Desk, Identity, Security, Network and Application teams.
• Support endpoint lifecycle management, operational reporting and continuous improvement.
• Ensure effective APAC–EMEA–NLAM follow-the-sun handovers.

Required Skills & Qualifications:

• 3–6 years of experience in enterprise endpoint management, Windows client administration, device management and production IT operations.
• Hands-on experience in Windows endpoint administration and troubleshooting.
• Practical experience with Microsoft Intune and/or SCCM/MECM.
• Knowledge of Windows OS deployment, patching, software dis