Modern Workplace Endpoint Engineer

About the role

As a Modern Workplace Endpoint Engineer, you will help design, build and operate enterprise endpoint-management and device-migration capabilities for a complex international separation programme. You will work hands-on with Microsoft Configuration Manager (MECM), Windows 11 imaging and OS deployment, application packaging, patch management, device staging and IT Corner services, supporting pilots and controlled migration waves while ensuring endpoint security, asset accuracy and uninterrupted service for end users.

Key responsibilities

• Design, build and validate MECM environments, including SQL databases, site system roles, boundaries, discovery, distribution points, management points, PXE, certificates and role-based administration.
• Create and maintain Windows 11 light images and MECM OS deployment task sequences, with drivers, apps, security agents, encryption, hardening and AppLocker.
• Review application inventories and repack country-specific applications, validating content distribution and hardware compatibility.
• Prepare and validate IT Corner and device-staging capabilities, integrated with DNS, DHCP, Active Directory, PKI, KMS and network/security services.
• Plan and run country pilots and migration waves, including device assessment, user appointments, swap-and-remaster rotation, hypercare and exception management.
• Operate and troubleshoot endpoints and MECM services, support patching via WSUS and Patch My PC, and manage warranties, stock and loan devices.
• Maintain accurate asset and ownership records in source and target CMDBs, reconciling migrated, returned, wiped, reimaged and retired devices.
• Produce architecture, design, deployment, test, disaster recovery, training and handover documentation, and collect evidence against acceptance criteria.
• Coordinate delivery across countries with Client Management, End User Support, Network, Hosting, IAM, Security and local site teams.

Required profile

• At least 5 years of hands-on experience designing, implementing and supporting Microsoft Configuration Manager environments and Windows endpoint deployment in complex enterprises.
• Experience with high-volume, multi-site endpoint migrations, pilots and waves, and with L2/L3 endpoint support and IT Corner or field-support models.
• Experience with ITSM and CMDB processes, including incident, request, change and problem management, asset reconciliation and SLA-driven delivery.
• Ability to create technical and operational documentation, test plans, runbooks and training materials.
• Strong analytical, troubleshooting, stakeholder-management and communication skills, with English and willingness to work on-site in Madrid (Getafe).

Required skills

• MECM architecture and administration, including SQL, site roles, boundaries, collections, RBAC, PXE, reporting and certificates.
• Windows 11 imaging, OS deployment, task sequences, driver management and application packaging, preferably with enterprise packaging repositories.
• Patch management with WSUS and preferably Patch My PC.
• Active Directory, DNS, DHCP, PKI, KMS, NAC, endpoint encryption, AppLocker, browser and Office hardening, antivirus exclusions and endpoint security agents.
• Desirable: Microsoft endpoint-management certifications such as MD-102; equivalent demonstrable expertise will also be considered.

What we offer

• Work for Microsoft's Global Alliance Partner of the Year, with development and training of at least 80 hours per year and paid certifications.
• Access to technical and skilled resources globally, a dedicated career advisor and engaged coworkers.