Endpoint Management Engineer

Role Title: Endpoint Management Engineer
 
Role Purpose
 
Cathara Consulting is seeking an experienced Endpoint Management Engineer to support the delivery and enhancement of enterprise endpoint management and device security capabilities. The successful candidate will be responsible for the design, implementation, testing, and operationalisation of Microsoft Intune as the strategic endpoint management platform, ensuring secure, compliant, and consistently managed device environments across Windows and mobile platforms.

The role requires strong expertise in Microsoft Intune, Microsoft Entra ID, Windows Autopilot, Android Enterprise, and endpoint security technologies. The Endpoint Management Engineer will work closely with Cyber Security, Modern Workplace, and project delivery teams to implement modern device management solutions, strengthen security controls, and support the organisation's digital workplace strategy.
 
Essential Skills and Experience

• Demonstrated experience implementing and supporting Microsoft Intune within large and complex enterprise environments.
• Strong experience with Microsoft Entra ID, device identity, Conditional Access, and hybrid join environments.
• Experience deploying and managing Windows Autopilot, including user-driven, self-deploying, and pre-provisioned enrolment models.
• Hands-on experience with Android Enterprise, including fully managed devices, dedicated device enrolment, and zero-touch provisioning.
• Experience designing and implementing Mobile Application Management (MAM) and Application Protection Policies.
• Experience configuring and supporting Microsoft Defender for Cloud Apps controls.
• Experience implementing and supporting endpoint security and compliance controls across Windows and mobile device platforms.
• Experience developing operational documentation, runbooks, handover materials, and knowledge transfer artefacts.
• Strong understanding of endpoint management, device lifecycle management, and modern workplace technologies.

Key Responsibilities

• Build and enhance Microsoft Intune as the central platform for endpoint management.
• Configure and operationalise persona-based and role-based endpoint management capabilities.
• Design, implement, and support endpoint management configurations aligned to business and security requirements.
• Configure and validate zero-touch device enrolment capabilities across Windows and Android platforms.
• Implement and support Windows Autopilot deployment models.
• Implement and support Android Enterprise enrolment and management capabilities.
• Configure, test, and deploy endpoint management and device security solutions within Intune.
• Implement and refine Microsoft Intune Application Protection Policies (MAM).
• Implement and maintain Microsoft Entra ID Conditional Access policies for desktop and mobile devices.
• Configure and support Microsoft Defender for Cloud Apps controls and integrations.
• Support compliance monitoring, reporting, audit readiness, and evidence collection activities.
• Assist with User Acceptance Testing (UAT), go-live activities, and phased deployments.
• Develop operational runbooks, support documentation, and knowledge transfer materials.
• Work collaboratively with Cyber Security, Modern Workplace, and project delivery teams to deliver secure endpoint management solutions.

Desirable Skills and Experience

• Experience designing or supporting persona-based and role-based endpoint management architectures.
• Experience integrating Microsoft Entra ID with third-party endpoint management platforms.
• Experience with Workspace ONE environments and device compliance integrations.
• Knowledge of enterprise mobility and modern workplace strategies.
• Experience supporting large-scale endpoint management transformation projects.
• Understanding of cyber security frameworks, device compliance requirements, and governance practices.
• Experience with endpoint compliance reporting, audit activities, and operational support models.
• Strong stakeholder engagement and communication skills.
• Relevant Microsoft certifications in Intune, Endpoint Management, Microsoft 365, or Security technologies.