Salary: £45,000 - 51,000 per year Requirements: Demonstrable experience managing large Windows 10/11 estates with Intune and Configuration Manager, including co-management or migration experience. Expertise in AVD engineering, covering image creation, session host patching, FSLogix, scaling, monitoring, and troubleshooting pooled and personal setups. Strong knowledge of patch management, Windows Update for Business, compliance reporting, and servicing channel operations. Proven track record in Active Directory and Entra ID configurations with a focus on Conditional Access and security fundamentals. Competency in packaging (Win32/MSIX), scripting (PowerShell), and endpoint automation. Networking knowledge applicable to endpoint and AVD scenarios, including DNS, certificates, VPN, and proxies. Experience transitioning from ConfigMgr to Intune and implementing Autopilot at scale (desirable). Familiarity with Defender, WDAC/AppLocker, CIS baselines, and ITSM practices (ITIL) (desirable). Monitoring and observability expertise, using tools like Log Analytics and Azure Monitor (desirable). Knowledge of Azure infrastructure (IaaS) and image pipelines (desirable). MD-102 (Endpoint Administrator) certification (preferred). AZ-140 (Azure Virtual Desktop) certification (preferred). AZ-104 (Administrator) certification (preferred). SC-200/SC-900 (Security Basics) certification (preferred). Responsibilities: Design, deploy, and manage Intune (MDM/MAM) for Windows 10/11, including configuration profiles, compliance policies, update rings, feature updates, Security Baselines, BitLocker, and Defender policies. Maintain and optimise Microsoft Configuration Manager (SCCM/ConfigMgr) for application packaging, task sequencing, OS deployment, software updates, and co-management strategies with Intune. Lead Windows Autopilot provisioning workflows, ensuring seamless device naming, enrolment, and remediation processes. Oversee the security patching service, including monthly cycles, pilot rings, rollbacks, out-of-band updates, and reporting on deployment success, SLA adherence, and CVE coverage. Incorporate vulnerability findings into patching plans, addressing high-severity issues and publishing compliance dashboards and summaries. Engineer and operate AVD host pools (pooled & personal), golden image strategies, FSLogix profiles, app layering, and scaling plans. Implement AVD monitoring, auto-healing, and patch scheduling while testing and maintaining security controls, incorporating Conditional Access, MFA, and trusted location policies. Manage Active Directory (OU design, GPO creation/troubleshooting) and Microsoft Entra ID for device identity, compliance, and Conditional Access scenarios. Apply Microsoft Defender policies and baseline hardening while enhancing local admin controls, application security, and privilege reduction. Troubleshoot endpoint connectivity across DNS/DHCP, Wi-Fi, VPNs, and NAC. Collaborate on Azure networking setups (VNets, NSGs, routing, firewalls) for reliable software distribution and management traffic on endpoints and AVD. Build and maintain Win32/MSIX packages, automating deployments and system health checks using PowerShell and Graph API. Drive service improvement insights using Log Analytics, Update Compliance, SSRS, and Power BI. Technologies: API Active Directory Azure IaaS ITIL ITSM Power BI PowerShell Security VPN Windows Cloud DevOps More: We are looking for a skilled Microsoft EUC (End-User Computing) Engineer to join our team on a 6-month contract basis in Surrey, working in a hybrid model with 3 days a week onsite. In this role, you will take ownership of evolving modern endpoint management using Microsoft technologies and ensure secure, reliable, and compliant patching and software delivery across our organizations estate. Our company is dedicated to recruitment and making your success our priority, being part of The IN Group which connects talented individuals with opportunities in the market. last updated 5 week of 2026