The Endpoint Engineer is responsible for
end-to-end management and support of endpoint management platforms
, primarily
Microsoft Endpoint Configuration Manager (SCCM)
and
Microsoft Intune (MEM)
.
This role covers
device lifecycle management, patching, application packaging & deployment, policy enforcement, and troubleshooting
. The engineer is expected to
resolve complex endpoint issues, ensure compliance, and maintain platform health
across enterprise environments.
Key Responsibilities
Endpoint Platform Support (SCCM & Intune)
- Administer and support:
- SCCM (ConfigMgr) infrastructure
- Microsoft Intune (MDM/MAM)
- Co-management (SCCM + Intune integration)
- Monitor platform health (site servers, distribution points, connectors, sync status)
- Troubleshoot client-side and server-side issues
Patch Management (Critical Responsibility)
- Plan, deploy, and monitor
monthly patching cycles
(Windows updates via SCCM/Intune)
- Ensure compliance with defined SLAs and patch baselines
- Troubleshoot patch failures and deployment issues
- Generate patch compliance and audit reports
- Coordinate with application and business teams for patch validation
Application Packaging & Deployment
- Package applications using:
- MSI / EXE / Intune Win32 formats
- Deploy applications via SCCM and Intune
- Handle:
- Application testing and validation
- Version upgrades and rollback strategies
- Troubleshoot deployment failures and detection logic issues
Device Management & Policy Enforcement
- Manage device configurations using:
- Group Policy (GPO)
- Intune configuration profiles
- Compliance policies and conditional access
- Enroll and manage devices (Windows, mobile devices if applicable)
- Ensure endpoint compliance with security standards
Incident & Problem Management
- Act as
L2 resolver group
for endpoint-related incidents
- Troubleshoot issues such as:
- Software deployment failures
- Patch compliance gaps
- Device enrollment issues
- Policy conflicts (GPO vs Intune)
- Ident