Lead End User Computing (EUC) Engineer

Responsibilities

Technical leadership & roadmap

. Own and maintain the technical roadmap for endpoint provisioning, OS lifecycle, encryption, and mobile management.

. Set engineering standards, baselines, and best practices drive consistency across the estate.

. Mentor and provide technical direction to junior and mid-level engineers review their work and grow their capability.

. Lead design reviews, evaluate new tooling/approaches, and make architecture recommendations to the EUC Manager.

Endpoint provisioning & imaging

. Design and continuously improve zero-touch device provisioning using Windows Autopilot (Entra hybrid and Entra-joined).

. Own Autopilot profiles, configurations, deployment profiles, and dynamic grouping.

. Maintain provisioning quality, driver/firmware management, OEM relationships, and resolution of complex enrolment failures.

OS lifecycle & upgrades

. Plan and lead Windows feature and EOL upgrade campaigns across the fleet.

. Own update rings, Windows Update for Business policies, and rollout strategy.

. Diagnose and develop repeatable remediation for upgrade failures (in-place upgrade blocks, hardening conflicts, disk/component issues).

Mobile device management

. Set strategy and standards for iOS and Android enrolment, configuration, and compliance via Intune (BYOD and corporate-owned).

. Own app protection / MAM policies, certificate and Wi-Fi/VPN profiles, and mobile app deployment.

Requirements

. 7+ years in endpoint engineering / EUC, with a track record of owning a Windows fleet end-to-end at scale.

. Demonstrated experience leading workstreams and mentoring or technically guiding other engineers.

. Expert-level Microsoft Intune/SCCM administration across Windows and mobile.

. Deep, hands-on Windows Autopilot experience in production at scale.

. Proven ownership of Windows OS upgrade / EOL migration programmes from planning through delivery.

. Strong command of BitLocker, Entra ID, Conditional Access, and Windows compliance.

. Tanium (or SCCM / ConfigMgr) for endpoint management and patching.

. Advanced PowerShell scripting comfortable automating against the Microsoft Graph API.

. Certifications such as Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) or equivalent Microsoft 365 Certified: Administrator Expert (MS-102), SC-300, or SC-200 a plus.

Licence no: 12C6060