Microsoft Endpoint Manager

We are looking for a Microsoft Endpoint Manager for an aviation sector modern workplace migration and digital modernisation programme, centered around a migration onto Microsoft infrastructure and hardware. The Endpoint Manager will lead the technical delivery and operational readiness of the endpoint management platform for the end client joint venture separation across Germany, France, the UK and Spain. 

This is a senior technical delivery role. This person needs the depth to configure and troubleshoot Microsoft Endpoint Configuration Manager (MECM, also known as SCCM), alongside the judgement to manage security, integration and service dependencies.

Key responsibilities 

• Lead MECM infrastructure installation and configuration, including site roles, boundaries, discovery, distribution, administrative access and role-based access control. Coordinate SQL Server, hosting, network flows, certificates and service integrations
• Deliver the approved Windows 11 Light Master, boot images, drivers and deployment task sequences. Validate hardware and BIOS compatibility and support reliable automated deployment across the required device models
• Migrate and adapt application packages using PowerShell and the Instlib framework. Integrate Microsoft and third-party patching through WSUS and Patch My PC, with controlled pilot deployments and compliance reporting
• Implement approved endpoint configurations, browser and Office hardening, AppLocker and encryption requirements. Coordinate security agents and approved antivirus exclusions with the security teams
• Connect the platform to Remedy or myITSM, software governance through SIC, and CMDB processes. Resolve dependencies with the End User Devices lead so that usable images, applications and deployment services are ready for migration waves
• Lead technical testing and L3 fault resolution. Establish client health monitoring, SQL and MECM maintenance, backups, recovery arrangements and operating procedures for the L2 and L3 support teams
• Produce supplier technical deliverables and acceptance evidence, support Airbus architecture and security reviews, and manage technical changes through the existing change and CAB processes

Essential skills and experience 

• Proven delivery of enterprise MECM or SCCM builds, migrations or major changes, with hands-on knowledge of site systems, distribution, discovery, boundaries, client deployment and access control
• Strong Windows deployment experience covering WinPE, task sequences, driver management, hardware validation and application packaging, supported by practical PowerShell automation and troubleshooting
• Working knowledge of SQL Server administration for MECM, reporting through SQL Server Reporting Services, backup and recovery, and platform performance diagnosis
• Experience operating WSUS and third-party patching, including pilot groups, maintenance windows, compliance reporting and remediation of failed deployments
• Ability to implement endpoint security baselines and diagnose interactions between deployment tools, encryption, application control, security agents and network restrictions
• Experience leading technical delivery across multiple teams or countries, producing detailed design and operational documentation, and working within incident, problem and change management processes. 

This will be a fully remote contract role and you must be resident in the UK to be considered for this contract role as it is Inside IR35 working via Umbrella Company.