Senior Endpoint Engineer (EUC)

View full description

Requirements:

• Extensive experience with Microsoft Intune, Windows Defender Application Control (WDAC), and Group Policy management.
• Strong expertise in VPN solutions (Cisco AnyConnect, FortiClient, Palo Alto GlobalProtect, or similar).
• Proven experience in endpoint security hardening, compliance, and vulnerability remediation.
• Advanced knowledge of Windows 10/11, and modern endpoint management strategies.
• Proficiency in PowerShell scripting for automation and troubleshooting.
• Experience with Windows Autopilot, BitLocker, and device encryption policies.

Responsibilities:

• Design, implement, and manage WDAC policies to secure endpoints and ensure compliance with Essential Eight, ISO 27001, and NIST.
• Audit and optimize security settings, enforce BitLocker encryption, and deploy Microsoft Intune for cloud-based endpoint management.
• Manage Group Policies (GPOs) for on-premises and hybrid environments, ensuring best practices in security and policy configuration.
• Configure, maintain, and optimise VPN solutions to support remote workforces securely.
• Work with network and security teams to enhance Zero Trust access models.
• Ensure VPN configurations align with compliance requirements and industry best practices.
• Utilize PowerShell scripting to automate endpoint configurations, deployments, and maintenance tasks.
• Optimize endpoint performance by analysing telemetry data and applying proactive remediations.
• Implement and maintain Windows Autopilot for seamless device provisioning and lifecycle management.
• Collaborate with security, infrastructure, and service management teams to align endpoint strategies with business objectives.
• Develop and maintain documentation, including SOPs, knowledge base articles, and technical guides.