Endpoint Management Engineer

Richemont, one of the world leaders in the luxury sector, has various Houses specializing in jewelry, watches and high-end accessories. Each Maison proudly embodies a tradition of style, quality and craftsmanship and Richemont strives to preserve the heritage and identity specific to each of them. At the same time, we are committed to innovating and designing new products in line with the values ​​of our Houses, through a process of permanent creativity.

The Endpoint Management Engineer designs, builds, modernizes, and operates Windows endpoint management solutions in a large-scale, global enterprise environment.

The role primarily focuses on Windows 11, Microsoft Intune, Windows Autopilot, automation, endpoint security, and performance optimization.

The engineer drives the transition toward modern endpoint management, delivering secure, reliable, automated, and high-performing workplace solutions across corporate, manufacturing, retail, and contact center environments.

This is an engineering-focused role, not a traditional desktop support position.

• Engineer and maintain Windows 11 endpoint configurations, policies, and security baselines using Microsoft Intune.
• Design and optimize Windows Autopilot provisioning, deployment, and device lifecycle management.
• Drive the transition from legacy Group Policy Objects (GPO) toward modern cloud-based management.
• Manage Windows updates, patching, application deployments, compliance policies, and configuration profiles.
• Troubleshoot complex Windows, Intune, Entra ID, and hybrid identity integration issues.

• Proactively identify and resolve Windows performance issues affecting boot time, application responsiveness, and overall user experience.
• Leverage endpoint telemetry and troubleshooting tools to improve platform stability and reliability.
• Collaborate with Security teams to implement endpoint hardening, security baselines, and compliance requirements.
• Use platforms such as Tanium and Palo Alto Cortex XDR for endpoint visibility, troubleshooting, and remediation.
• Drive root cause analysis and permanent resolution of recurring technical issues.

• Develop and maintain scripts to automate provisioning, configuration, remediation, and operational activities.
• Integrate Microsoft Graph API and other enterprise APIs to automate endpoint management activities.
• Contribute to the adoption of Infrastructure-as-Code, Git-based workflows, and CI/CD practices.
• Maintain technical documentation, reusable scripts, and engineering standards.

• Deliver engineering initiatives and platform improvements through Agile practices using Jira.
• Collaborate with Security, Identity, Networking, Workplace, and other Endpoint Engineering teams.
• Support complex L3 escalations and contribute to problem management and permanent fixes.
• Apply ITIL practices for incident, problem, and change management while maintaining an engineering-first approach.

• Strong hands-on experience engineering and managing Windows endpoints in large-scale enterprise environments.
• Advanced knowledge of Windows 11 architecture, configuration, troubleshooting, and performance optimization.
• Proven expertise with Microsoft Intune, including:
  • Device enrollment and Windows Autopilot
  • Configuration profiles and security baselines
  • Windows Update for Business and patch management
  • Compliance policies and remediation scripts
• Solid understanding of Active Directory, Microsoft Entra ID, hybrid identity, and GPO-to-Intune migration.
• Advanced PowerShell scripting skills and experience automating Windows administration.
• Strong troubleshooting capabilities across Windows OS, authentication, networking, security, and application performance.
• Experience working with enterprise endpoint security and management solutions.

• Strong engineering mindset with a focus on automation, standardization, and reliability.
• Ability to challenge legacy practices and propose practical improvements.
• Strong ownership, accountability, and documentation habits.
• Excellent English communication skills, both written and verbal.

Experience in the following areas will significantly strengthen a candidate's profile but is not mandatory:

• Cross-Platform Endpoint Management.
• Virtualization, Browser & Secure Access.
• DevOps, Automation & Cloud.
• Endpoint Security & Observability.

#Richemont #WeCraftTheFuture