The Role
Manage and improve enterprise Windows endpoints, including deployment, configuration, patching, application packaging, security policies, and device lifecycle management. Administer Intune, Configuration Manager, Autopilot, Active Directory, Entra ID, Group Policy, and Microsoft 365 integrations. Automate administrative tasks with PowerShell, troubleshoot endpoint and connectivity issues, maintain documentation, and collaborate with infrastructure, security, service desk, and application teams.
Summary Generated by Built In
About the Role
Key Responsibilities
RequirementsRequired Skills and Experience
Preferred Qualifications
We are looking for a Windows Client Engineer to help manage, secure, and continuously improve our Windows endpoint environment. You will collaborate with infrastructure, security, and service desk teams to deliver a reliable and efficient digital workplace.
The scope of responsibilities will be aligned with your experience and strengths, with opportunities to contribute across endpoint management, automation, and workplace modernisation.
Key Responsibilities
- Configure, deploy, maintain, and optimise Windows client operating systems and endpoint configurations.
- Manage devices using Microsoft Intune, Microsoft Configuration Manager, and related endpoint management solutions.
- Support automated device provisioning and lifecycle management, including Windows Autopilot.
- Package, test, deploy, and update business applications.
- Manage operating system updates, security patches, and feature upgrades.
- Implement and maintain endpoint security policies in collaboration with the security team.
- Administer device policies through Microsoft Intune and Group Policy.
- Troubleshoot issues related to client performance, applications, authentication, and connectivity.
- Automate recurring administrative tasks using PowerShell.
- Support integration with Microsoft Entra ID, Active Directory, and Microsoft 365 services.
- Maintain technical documentation, configuration standards, and operational procedures.
- Collaborate with the service desk and application owners to resolve escalated issues and improve the user experience.
RequirementsRequired Skills and Experience
- Practical experience with Windows client administration or endpoint engineering in an enterprise environment.
- Working knowledge of Microsoft Intune, Microsoft Configuration Manager, or comparable endpoint management tools.
- Understanding of application deployment, patch management, and device lifecycle management.
- Familiarity with Active Directory, Microsoft Entra ID, and Group Policy.
- Experience with PowerShell scripting and automation.
- Understanding of endpoint security, encryption, access controls, and device compliance.
- Familiarity with networking fundamentals, including DNS, DHCP, VPN, and TCP/IP.
- A structured approach to troubleshooting and a service-oriented mindset.
- Ability to collaborate across technical teams and maintain clear documentation.
- Good written and spoken English.
Preferred Qualifications
- Experience with Windows Autopilot and modern endpoint management.
- Familiarity with co-management and migration from traditional to cloud-based device management.
- Experience with Microsoft Defender for Endpoint, BitLocker, and endpoint security baselines.
- Knowledge of application packaging technologies such as MSI and MSIX.
- Exposure to virtual desktop environments, including Azure Virtual Desktop or Windows 365.
- Experience supporting Microsoft 365 applications and services.
- Relevant Microsoft certifications are an advantage.
Skills Required
- Practical experience with Windows client administration or endpoint engineering in an enterprise environment
- Working knowledge of Microsoft Intune, Microsoft Configuration Manager, or comparable endpoint management tools
- Understanding of application deployment, patch management, and device lifecycle management
- Familiarity with Active Directory, Microsoft Entra ID, and Group Policy
- Experience with PowerShell scripting and automation
- Understanding of endpoint security, encryption, access controls, and device compliance
- Familiarity with DNS, DHCP, VPN, and TCP/IP networking fundamentals
- Structured troubleshooting approach and service-oriented mindset
- Ability to collaborate across technical teams and maintain clear documentation
- Good written and spoken English
- Experience with Windows Autopilot and modern endpoint management
- Familiarity with co-management and migration from traditional to cloud-based device management
- Experience with Microsoft Defender for Endpoint, BitLocker, and endpoint security baselines
- Knowledge of MSI and MSIX application packaging technologies
- Exposure to Azure Virtual Desktop or Windows 365
- Experience supporting Microsoft 365 applications and services
- Relevant Microsoft certifications
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Avacone is a Swiss-based service provider specializing in IT infrastructure and pharmaceutical engineering, delivering specialized solutions for regulated and non-regulated environments in the pharmaceutical, chemical, and medical technology sectors.
