Workplace Engineer (Intune, Windows 365, Endpoint Security)

About the role

SGS, a global testing, inspection and certification company, is looking for a Workplace Engineer/Analyst for its Corporate Workplace & Collaboration team in Madrid. You will engineer, operate and improve the global Modern Workplace ecosystem, acting as technical expert for managed devices, Intune, Windows, endpoint security, update governance and Windows 365, ensuring platforms are delivered consistently, scalably and in line with corporate IT standards and cybersecurity requirements.

Key responsibilities

• Serve as subject matter expert for Intune, Windows, device management, compliance policies, update channels and endpoint technologies.
• Design and implement Modern Workplace solutions such as Autopilot, configuration profiles, compliance baselines, Windows update governance and mobile device management.
• Act as technical lead for initiatives like device standardization, Windows 365 deployments, endpoint security rollouts and modernization projects.
• Act as Tier 3 escalation point for complex endpoint incidents (Windows, iOS/Android, Intune policy conflicts, MDM enrollment, compliance failures, security agents).
• Handle non-standard service requests requiring deep engineering knowledge.
• Develop and maintain documentation, runbooks, best practices, baseline definitions and operational procedures.
• Collaborate with Microsoft, service and hardware vendors and security partners.
• Support M&A activities related to device migration, Intune onboarding, Windows image alignment and policy standardization.

Required profile

• 3+ years of hands-on experience in Microsoft Intune / Endpoint Manager, endpoint engineering, Modern Workplace operations and Microsoft 365 environments.
• Degree in Computer Science, IT, Engineering or equivalent professional experience.
• Strong troubleshooting, analytical, stakeholder management, project coordination and technical communication skills.

Required skills

• Strong knowledge of Microsoft Intune (Autopilot, configuration profiles, compliance policies, update rings, app deployment) and Windows 10/11 enterprise environments.
• Mobile device management (iOS/Android), Microsoft 365 services (Teams, Exchange Online, SharePoint, OneDrive) and Azure AD / Entra ID.
• Preferred: Microsoft certifications, Windows 365 experience, certificate-based authentication, ITSM tools such as ServiceNow.

What we offer

• Flexible schedule and hybrid work model.
• Continuous learning through SGS University and Campus.
• Multinational environment and a comprehensive benefits platform.