Engineer IT Modern Workplace

Tasks and Responsibilities

Endpoint Management & Modern Workplace

• Lead the administration and evolution of Microsoft Intune (Endpoint Manager) for managing Windows, macOS, iOS, and Android devices.
• Design and maintain device deployment solutions using Windows Autopilot and Apple Business Manager.
• Define and implement device configuration, compliance, and security policies.
• Manage the full lifecycle of enterprise devices, from provisioning and deployment to refresh and retirement.
• Support and optimize Windows 365 Cloud PC services.

Microsoft 365 & Identity Management

• Act as the technical lead for endpoint and identity management services within Microsoft 365.
• Manage and maintain Entra ID (Azure AD), including user lifecycle, group management, Conditional Access, and role assignments.
• Collaborate with infrastructure, security, and business teams to deliver secure and efficient workplace solutions.
• Contribute to the roadmap and continuous improvement of Modern Workplace technologies.

Endpoint Security & Compliance

• Lead the implementation and maintenance of endpoint security solutions using Microsoft Defender for Endpoint.
• Define and enforce endpoint security and compliance standards based on CIS Security Baselines and company policies.
• Monitor compliance and security posture, identify risks, and drive remediation activities.
• Support security investigations and act as an escalation point for complex endpoint-related issues.

Application & Mobility Management

• Lead application packaging, testing, deployment, and lifecycle management through Intune.
• Manage Mobile Device Management (MDM) and Mobile Application Management (MAM) solutions.
• Ensure applications and mobile devices are deployed securely and comply with corporate standards.
• Troubleshoot and resolve complex application deployment and endpoint management issues.

Automation & Continuous Improvement

• Develop and maintain PowerShell scripts to automate endpoint management and administrative tasks.
• Identify opportunities to improve processes, increase automation, and enhance user experience.
• Evaluate new technologies and features within the Microsoft ecosystem and recommend improvements.
• Create and maintain technical documentation, standards, and operational procedures.

Leadership & Governance

• Serve as a subject matter expert for Intune, Entra ID, Defender for Endpoint, Windows Autopilot, and Windows 365.
• Provide technical guidance and mentoring to team members.
• Lead endpoint management projects and ensure successful delivery of technical solutions.
• Promote best practices, governance standards, and continuous service improvement across endpoint services.

Technical Skills - Technologies expertise

• Microsoft Intune / Endpoint Manager
• Apple Business Manager
• Windows Autopilot
• Windows 365 Cloud PC
• Microsoft 365 Administration
• Entra ID (Azure AD)
• Microsoft Defender for Endpoint
• CIS Security Baselines
• Endpoint Security & Compliance
• Mobile Application Management (MAM)
• PowerShell scripting
• Application packaging and deployment
• Enterprise device lifecycle management

Essential Requirements For The Position

• Bachelor degree in IT.
• 7 Years of Experience in the position described above.
• Strong knowledge of CIS security standards for endpoint protection.
• Experience delivering large-scale device deployments and workplace transformations.
• Expert knowledge in End user device deployments on system side, including but not limited to:
• Microsoft Intune
• Airwatch
• Apple Business Manager
• On premise deployment (i.e. optimized end user experience, planification of deployment, organizing large scale deployment over multiple locations, ...)
• Experience with Apple device administration in corporate environments.
• Advanced troubleshooting and root cause analysis expertise.
• Strong stakeholder and end-user relationship management skills.
• Experience supporting cloud-first workplace environments.
• Extensive knowledge in Azure Entra.
• Knowledge in Vulnerability management and remediation on a Microsoft 365 level.
• Excellent teamwork, time-management, and organizational skills.
• High level of oral and written communication skills in English with the aim of providing effective support to IT technicians.
• Experience in leading end-to-end project lifecycles.

Working Conditions

• Permanent full-time position based in Luxembourg.
• The candidate will work in an Agile, friendly, innovative & operational Azure only environment.
• Normal office hours are to be expected, with occasional work outside these hours to perform tasks (planned or unplanned) on the environment.
• The position holder might have to be on stand-by (on-call) outside the normal office hours and weekends in case of incidents.
• It is expected that during critical incidents the candidate can commit to resolve the incident to the end if required.
• Valid car drivers license required.
• A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of positive selection.