Technology Solutions Engineer, Endpoint Technologies Management, IITS

Job Description

• This position is for Office of Integrated Information Technology Services (IITS).
• Build, implement, and maintain software installation, configuration, and lifecycle management for Windows, Mac, and mobile devices - including rollouts, upgrades, patches, and service packs.
• Manage and deploy Windows and Mac endpoints using Microsoft Intune (Windows Autopilot) and JAMF, covering all end-user devices across the university.
• Coordinate with the IT Help Centre on desktop application updates and rollouts via Microsoft Intune/JAMF across different business departments.
• Deliver endpoint technical solutions aligned with specified plans, deliverables, costs, and timelines.
• Ensure high availability, performance, and overall user experience in line with business and academic expectations.
• Monitor and manage all endpoint vulnerabilities across client OS, applications, and hardware by applying critical security and application updates in a timely manner.
• Monitor and assess business needs against endpoint security concerns, collaborating with the security team to manage overall endpoint security posture.
• Respond to, investigate, and escalate alerted events and incidents from security technologies.
• Administer and tune Microsoft Defender for Endpoint, including Vulnerability Management, Incidents/Alerts, and integration with Microsoft Intune for device compliance enforcement.
• Support the university's Zero Trust security framework - enforcing least-privilege access, Conditional Access policies, and continuous device health compliance checks.
• Manage Endpoint Data Loss Prevention (DLP) and Endpoint Privilege Management solutions in line with university policies.
• Design and implement self-service capabilities that reduce help desk dependency and improve end-user experience.
• Administer Microsoft Purview (Information Protection, Records Management, Data Loss Prevention) to ensure data governance and compliance.
• Manage Microsoft Conditional Access policies and Microsoft Entra ID for identity-based endpoint access control.
• Support Microsoft Defender for Cloud Apps for SaaS application visibility and control across managed endpoints.
• Maintain proficiency across the Microsoft 365 security stack and contribute to continuous improvement of the university's security posture.
• Provide Level-2 support for escalated endpoint issues, investigating root causes and implementing lasting fixes.
• Provide dedicated IT support for the senior executive team, ensuring a premium and responsive experience.
• Identify trends in specific support areas and work proactively with stakeholders to address them.
• Collaborate with external vendors and suppliers to evaluate emerging technologies and develop cost-optimised solutions maintain vendor relations and perform procurement comparisons.
• Maintain accurate records of licensing, inventory, and maintenance contracts.
• Create, review, and maintain technical documentation including design guides, operational runbooks, and internal knowledge base articles.
• Share knowledge through documentation and demonstrations of technologies, tools, and methodologies.
• Identify and implement process improvements to increase productivity and drive consistency in end-user support.
• Participate in evaluating, testing, and recommending OS patch management strategies and provide technical support across production and development environments.
• Other duties as assigned.

Qualifications

• Degree in Information Technology, Computer Science, Engineering, or a related discipline.
• 5 to 8 years of experience in endpoint management, desktop engineering, or IT operations in a fast-paced enterprise environment.
• In-depth knowledge of Microsoft Windows OS and macOS environments, including administration, troubleshooting, upgrading, patching, and configuration.
• Hardware knowledge of laptops, desktops, thin clients, printers, iMac, and MacBook in an enterprise environment.
• Expertise with SCCM, Microsoft Intune, and JAMF for orchestration, software delivery, and modern device management.
• Experience with Microsoft Purview, Microsoft Defender (for Endpoint, Cloud Apps, Vulnerability Management), and Microsoft Conditional Access.
• Strong knowledge of Active Directory, Microsoft Entra ID, DNS, networking, routing, VPN, firewall, and system security.
• Experience with endpoint security solutions including Endpoint Data Loss Prevention and Endpoint Privilege Management.
• Proficiency in scripting with PowerShell and Python for automation and workflow development.
• (New) Familiarity with Zero Trust architecture principles and their practical application in endpoint management.
• (New) Exposure to AI/Copilot-assisted IT operations tools and willingness to adopt emerging automation technologies.
• Experience automating workflows and delivering self-service capabilities to end-users.
• Experience designing technical solutions that address complex business and compliance requirements.
• Self-motivated with a strong customer-service orientation and a proactive, can-do attitude.
• Ability to work independently and collaborate effectively in a cross-functional environment.
• Strong prioritisation and multitasking skills while maintaining high quality of service.
• Excellent written and verbal communication skills for authoring technical documentation and engaging stakeholders.
• Keen interest in staying current with cybersecurity and endpoint technology trends.
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).
• Microsoft Certified: Security, Compliance, and Identity Fundamentals / Associate.
• CompTIA Security+ or equivalent cybersecurity certification.
• ITIL Foundation.

• This position is for Office of Integrated Information Technology Services (IITS).
• Build, implement, and maintain software installation, configuration, and lifecycle management for Windows, Mac, and mobile devices - including rollouts, upgrades, patches, and service packs.
• Manage and deploy Windows and Mac endpoints using Microsoft Intune (Windows Autopilot) and JAMF, covering all end-user devices across the university.
• Coordinate with the IT Help Centre on desktop application updates and rollouts via Microsoft Intune/JAMF across different business departments.
• Deliver endpoint technical solutions aligned with specified plans, deliverables, costs, and timelines.
• Ensure high availability, performance, and overall user experience in line with business and academic expectations.
• Monitor and manage all endpoint vulnerabilities across client OS, applications, and hardware by applying critical security and application updates in a timely manner.
• Monitor and assess business needs against endpoint security concerns, collaborating with the security team to manage overall endpoint security posture.
• Respond to, investigate, and escalate alerted events and incidents from security technologies.
• Administer and tune Microsoft Defender for Endpoint, including Vulnerability Management, Incidents/Alerts, and integration with Microsoft Intune for device compliance enforcement.
• Support the university's Zero Trust security framework - enforcing least-privilege access, Conditional Access policies, and continuous device health compliance checks.
• Manage Endpoint Data Loss Prevention (DLP) and Endpoint Privilege Management solutions in line with university policies.
• Design and implement self-service capabilities that reduce help desk dependency and improve end-user experience.
• Administer Microsoft Purview (Information Protection, Records Management, Data Loss Prevention) to ensure data governance and compliance.
• Manage Microsoft Conditional Access policies and Microsoft Entra ID for identity-based endpoint access control.
• Support Microsoft Defender for Cloud Apps for SaaS application visibility and control across managed endpoints.
• Maintain proficiency across the Microsoft 365 security stack and contribute to continuous improvement of the university's security posture.
• Provide Level-2 support for escalated endpoint issues, investigating root causes and implementing lasting fixes.
• Provide dedicated IT support for the senior executive team, ensuring a premium and responsive experience.
• Identify trends in specific support areas and work proactively with stakeholders to address them.
• Collaborate with external vendors and suppliers to evaluate emerging technologies and develop cost-optimised solutions maintain vendor relations and perform procurement comparisons.
• Maintain accurate records of licensing, inventory, and maintenance contracts.
• Create, review, and maintain technical documentation including design guides, operational runbooks, and internal knowledge base articles.
• Share knowledge through documentation and demonstrations of technologies, tools, and methodologies.
• Identify and implement process improvements to increase productivity and drive consistency in end-user support.
• Participate in evaluating, testing, and recommending OS patch management strategies and provide technical support across production and development environments.
• Other duties as assigned.