PC Engineer/Modern Workplace Engineer

We are looking for Modern Workplace Engineers to join the team of one of our multinational clients. Our client is a globally recognized company with whom we have maintained a strong business partnership for over 20 years. The organization operates across multiple industries, including aviation, healthcare, and energy, providing innovative solutions in a dynamic international environment.

• Hybrid Identity Management: Operate and maintain a hybrid Active Directory and EntraID (Azure AD) environment, including managing GPOs, Groups, User, and Computer accounts.

• Modern Endpoint Management: Oversee and configure thousands of Windows 10/11 endpoints in an enterprise environment using Microsoft Intune and Windows Autopilot.

• Integration & Troubleshooting: Implement and troubleshoot EntraID sync, hybrid join, Azure join, federated authentication, and Kerberos in a hybrid setup.

• Patch & Application Management: Manage Windows and M365 Apps patching using Intune, Windows Update for Business (WUfB), and Microsoft Autopatch. Package applications for global deployment using PSADT, MSI, etc.

• Automation & Scripting: Author complex PowerShell scripts for Windows endpoint configurations, application installations, scheduled tasks, and Intune remediation scripts.

• Cloud Automation: Utilize MSGraph API, Azure Automation Runbooks, Azure Blob Storage, and Log Analytics Workspaces to automate device management, EntraID group memberships, and user attributes.

• Security & Access Control: Manage Local Administrator rights and Privileged Access Management utilizing LAPS, PIM, and Conditional Access policies.

• Proven Experience: Strong background in operating and managing hybrid Active Directory / EntraID environments.

• Enterprise Scale: Experience managing Windows 10/11 endpoints in a large-scale environment (at least multiple thousands of endpoints) using Microsoft Intune and Autopilot.

• Advanced Scripting: Solid PowerShell scripting skills for endpoint configuration, remediation, and complex app deployment.

• Cloud Ecosystem Knowledge: Deep understanding of the M365 ecosystem, its dependencies on Windows endpoints, Conditional Access, and Privileged Identity Management (PIM).

• Application Packaging: Practical experience with global application deployment packaging tools (e.g., PSADT, MSI).

• Strong analytical, troubleshooting, and problem-solving skills with a proactive mindset.

• Experience with SCCM (MECM) or Tanium.

• Relevant Microsoft Certifications (e.g., MD-102, MS-102, AZ-104).

• Professional Growth: Fully funded training courses and support in obtaining professional certifications

• Hybrid / Flexible work model with great work-life balance.