EUC Engineer

- Design, deploy, and manage Intune (MDM/MAM) for Windows 10/11, including configuration profiles, compliance policies, update rings, feature updates, Security Baselines, BitLocker, and Defender policies. - Maintain and optimise Microsoft Configuration Manager (SCCM/ConfigMgr) for application packaging, task sequencing, OS deployment, software updates, and co-management strategies with Intune. - Lead Windows Autopilot provisioning workflows, ensuring seamless device naming, enrolment, and remediation processes. - Oversee the security patching service, including monthly cycles, pilot rings, rollbacks, out-of-band updates, and reporting on deployment success, SLA adherence, and CVE coverage. - Incorporate vulnerability findings into patching plans, addressing high-severity issues and publishing compliance dashboards and summaries. - Engineer and operate AVD host pools (pooled & personal), golden image strategies, FSLogix profiles, app layering, and scaling plans. - Implement AVD monitoring, auto-healing, and patch scheduling while testing and maintaining security controls, incorporating Conditional Access, MFA, and trusted location policies. - Manage Active Directory (OU design, GPO creation/troubleshooting) and Microsoft Entra ID for device identity, compliance, and Conditional Access scenarios. - Apply Microsoft Defender policies and baseline hardening while enhancing local admin controls, application security, and privilege reduction. - Troubleshoot endpoint connectivity across DNS/DHCP, Wi-Fi, VPNs, and NAC. - Collaborate on Azure networking setups (VNets, NSGs, routing, firewalls) for reliable software distribution and management traffic on endpoints and AVD. - Build and maintain Win32/MSIX packages, automating deployments and system health checks using PowerShell and Graph API. - Drive service improvement insights using Log Analytics, Update Compliance, SSRS, and Power BI.