Mandatory Skills:

• Active Directory and Group Policy
• Zscaler (Internet Access and Private Access)
• Microsoft Intune and Entra ID
• Software packaging and deployment solutions for MSI, MSIX, App-V
• Microsoft 365
• Endpoint Privilege Management

Key Responsibilities

• Providing escalation support and in-depth investigation capability for the GCC group
• Microsoft Secure Score continuous assessment, testing and improvement
• Evaluating, engineering and implementing (where appropriate) IT Security feature enhancement requests for the global endpoint estate
• Engineering solutions to help automate Evergreen processes such as:
• Self-service testing capability for application support and development teams to consume
• AutoPatch / Windows Update for Business
• Major Windows O/S updates
• Developing and maintaining PowerShell scripts for endpoint management automation tasks
• Ensuring systems and automated processes are designed with high availability and data protection in mind.
• Maintaining support documentation and issue tracking using Confluence and Jira

Experience & qualifications

• Endpoint & access management: Experience with Microsoft Intune and SCCM, and strong understanding of MDM/MAM/Conditional Access and Defender for Endpoint. Enterprise level Group Policy and Active Directory implementation and troubleshooting skills.
• Desktop engineering: Advanced Windows 11 troubleshooting. Desktop and Infrastructure troubleshooting and optimisation skills in an Enterprise environment
• Automation-first: Advanced PowerShell
• Security tools and principles: Attack Surface Reduction, least privilege access, Windows hardening, confident engagement with InfoSec.
• Networking foundations: HTTP, SMTP, DNS, TCP/IP, proxies, remote access and load balancers.
• Communication: Clear written/verbal communication and presentation skills for technical and senior audiences.
• Process: ITIL certification (desirable) and familiarity with structured change management.