Location
Central London

Hours
Full Time

Salary
Competitive, commensurate with experience

About the Role
We are seeking a Senior Endpoint Management Engineer to own, maintain, and evolve the platforms managing our entire device fleet. You will be the technical authority for two complementary MDM ecosystems — Microsoft Intune (Windows laptops, iPhones, and iPads) and Kandji / IRU (Apple MacBooks) — ensuring every device is secure, compliant, and effortless to use from day one. This is a hands-on engineering role focused on treating endpoint management as a product: automated, measurable, and built around the end-user experience.
As a fintech company operating in a highly regulated industry, we adopt cutting-edge technology to support rapid business growth without compromising security. You will be central to this mission, helping shift IT from a reactive, manual support model toward a proactive, automation-driven platform.

Key Responsibilities
- Own and continuously improve Microsoft Intune and Kandji / IRU platforms.
- Manage the full device lifecycle including zero-touch enrollment via Apple Business Manager (ADE) and Windows Autopilot, configuration, app deployment, patching, and retirement.
- Define and enforce configuration profiles, compliance policies, and baseline standards across all platforms and OS versions.
- Maintain integrations with Microsoft 365, Microsoft Azure / Entra ID, Microsoft Defender, Cisco Meraki, and Zscaler.
- Identify and automate repetitive, manual, and error-prone tasks using scripting, Microsoft Graph API, and AI-driven automations.
- Implement and maintain Zero Trust security controls and ensure compliance with regulatory standards such as ISO 27001, SOC 2, DORA, and GDPR.
- Deliver fast, reliable onboarding and proactively monitor device health to resolve issues before users notice.
- Act as senior escalation point for complex endpoint issues.
- Collaborate with IT Support, Operations, Security, and Infrastructure teams, documenting standards and tracking endpoint KPIs to drive continuous improvement.

Experience
- 3–5 years of hands-on experience administering MDM/endpoint management platforms in an enterprise environment.
- Proven expertise with Microsoft Intune across Windows and iOS/iPadOS, and macOS management via Kandji or comparable Apple MDM.
- Strong working knowledge of Apple Business Manager, Automated Device Enrollment (ADE), and Windows Autopilot.
- Solid grounding in Microsoft 365 and Microsoft Entra ID (Azure AD), including Conditional Access and compliance policies.
- Scripting and automation skills (PowerShell, Bash, and/or Microsoft Graph API).
- Practical understanding of endpoint security and compliance in a regulated environment.

Preferred / Nice to Have
- Relevant certifications such as Microsoft 365 Certified: Endpoint Administrator Associate (MD-102), Apple, or Kandji certifications.
- Hands-on experience with Microsoft Defender, Cisco Meraki, and Zscaler.
- Experience applying AI tooling (e.g., Copilot, AI-assisted scripting or support agents) to IT operations.
- Prior experience in fintech, financial services, or other regulated industries (ISO 27001, SOC 2, DORA, GDPR).

About You
- Proactive: anticipates problems and fixes root causes instead of reacting to tickets.
- A team player: collaborates openly, shares knowledge, and improves the team.
- Forward-looking: excited about automation and AI as tools to make IT faster and simpler.
- Security-minded: secure by default, balancing protection and usability.
- A clear communicator: comfortable engaging with both technical peers and non-technical end users alike.