Engineer - Endpoint

Endpoint Engineer contract 12 months. The position can be based inside or Outside of IR35, depending on the candidate's setup. A leading Trading firm is hiring a contract Endpoint Engineer. This role is responsible for engineering, support, and lifecycle management of endpoint hardware, operating systems, applications, and associated management platforms. This includes solving critical business incidents, improving the end-user experience, and partnering closely with Traders, Service Desk personnel, and other infrastructure teams. A strong customer focus, an ownership mentality, an engineering mindset, and a sense of urgency are critical. Troubleshoot and resolve complex endpoint, application, and user experience issues, particularly in high-speed, high-availability trading environments. Support endpoint platforms and services across Windows and macOS, with a focus on reliability, standardisation, security, performance, and software lifecycle management. Support and improve Microsoft Intune for endpoint configuration, compliance, patching, application deployment, device health, update rings, and policy management across physical and virtual endpoints. Help implement, manage, and improve self-service software experience through Company Portal and related tooling, including packaging Win32 applications, defining detection rules, uninstall logic, supersedence, assignments, and app lifecycle governance. Support and improve Microsoft Autopilot enrollment and provisioning workflows, including zero-touch deployment, enrollment profiles, device preparation, and integration with Microsoft Entra ID and Microsoft 365, in partnership with Windows Engineering. Partner with engineering, security, and operations teams to implement improvements, support strategic initiatives, and maintain reliable endpoint services. Apply an engineering approach and automation mindset to eliminate repetitive work, improve support response times, and increase platform reliability. Develop and maintain automation and operational tooling to improve provisioning, software deployment, reporting, remediation, and endpoint administration. Leverage AI tools and workflows to improve support operations, technical documentation, knowledge management, reporting, and user experience, while applying appropriate governance, validation, and security controls. Skills. Highly proficient in administering Windows and macOS operating systems in an enterprise environment. Experience with Microsoft Intune, including device configuration policies, compliance policies, Windows Update for Business, application deployment, reporting, and troubleshooting. Experience with Microsoft Autopilot and modern Windows provisioning, including enrollment profiles, device registration, reset/redeployment workflows, and integration with Entra ID, Conditional Access, and Microsoft 365. Experience designing and supporting self-service software deployment through Intune Company Portal or similar tools, including packaging, deployment targeting, dependency handling, detection methods, and uninstall workflows. Experience handling users, groups, and devices within Microsoft Entra ID (Azure), Active Directory (AD), Microsoft 365, and Jamf for macOS. Strong understanding of scripting and automation concepts used to improve endpoint administration, operational efficiency, and service delivery. Demonstrable understanding of AI-enabled productivity and support use cases, such as summarisation, knowledge retrieval, workflow acceleration, and intelligent ticketing, with sound judgment around security and operational accuracy. Strong technical writing, documentation, and communication skills, with the ability to create clear user-facing and operational documentation. Experience with core networking concepts and troubleshooting, including DNS, DHCP, routing, switching, VPN connectivity, and latency-sensitive user workflows. Ability to use data and reporting tools, including advanced Excel to analyze trends, measure outcomes, and support operational decisions. Demonstrable understanding of virtualization technologies such as VMware and Citrix. Solid understanding of Windows Server roles and enterprise services such as DNS, DHCP, Group Policy, file services, and endpoint security controls. Strong experience with software packaging and deployment using tools such as Intune, SCCM, Altiris, or equivalent platforms. Relevant certifications such as Microsoft, Jamf, VMware, Citrix, and networking are advantageous.