EndPoint Engineer, BYDGOSZCZ

• 3–5+ years of experience in Endpoint Engineering, Modern Workplace, or Endpoint Management.
• Strong hands-on experience with Microsoft Intune (MDM/MAM) in enterprise environments.
• Experience with Microsoft Defender for Endpoint, including onboarding, policy management, and alert investigation.
• Strong knowledge of Microsoft Active Directory, including Group Policy, Windows LAPS, delegated administration, security hardening, DNS, and DHCP.
• Experience administering Windows Autopilot, Windows Update for Business, compliance policies, and application deployment.
• Experience with Azure Virtual Desktop and/or Windows 365.
• Knowledge of Azure Arc and Azure Stack HCI administration.
• Practical PowerShell scripting skills for endpoint management and automation.
• Experience working with ITSM platforms such as ServiceNow.
• Understanding of change management, release management, and phased deployment strategies.
• Experience creating technical documentation and operational procedures.

Nice to Have

• Experience with Microsoft Graph API automation.
• Knowledge of endpoint security best practices and Zero Trust principles.
• Experience working in large, global enterprise environments.
• Familiarity with Agile and DevOps methodologies.

Soft Skills

• Strong analytical and troubleshooting skills.
• Excellent communication and collaboration abilities.
• Ability to work independently and take ownership of technical solutions.
• Proactive mindset with a focus on continuous improvement.
• Strong attention to security, quality, and operational excellence.

Endpoint Engineer (Microsoft Endpoint Management)

About the Role

We are looking for an experienced Endpoint Engineer to join a global IT Infrastructure team responsible for modern workplace technologies and endpoint management.

In this role, you will design, implement, and support enterprise endpoint solutions, helping to deliver secure, scalable, and modern device management services across a global environment. You will work closely with Infrastructure, Security, and Cloud teams to continuously improve endpoint security, automation, and user experience.

Required Skills & Experience

• 3–5+ years of experience in Endpoint Engineering, Modern Workplace, or Endpoint Management.


• Strong hands-on experience with Microsoft Intune (MDM/MAM) in enterprise environments.


• Experience with Microsoft Defender for Endpoint, including onboarding, policy management, and alert investigation.


• Strong knowledge of Microsoft Active Directory, including Group Policy, Windows LAPS, delegated administration, security hardening, DNS, and DHCP.


• Experience administering Windows Autopilot, Windows Update for Business, compliance policies, and application deployment.


• Experience with Azure Virtual Desktop and/or Windows 365.


• Knowledge of Azure Arc and Azure Stack HCI administration.


• Practical PowerShell scripting skills for endpoint management and automation.


• Experience working with ITSM platforms such as ServiceNow.


• Understanding of change management, release management, and phased deployment strategies.


• Experience creating technical documentation and operational procedures.

Nice to Have

• Experience with Microsoft Graph API automation.


• Knowledge of endpoint security best practices and Zero Trust principles.


• Experience working in large, global enterprise environments.


• Familiarity with Agile and DevOps methodologies.

Soft Skills

• Strong analytical and troubleshooting skills.


• Excellent communication and collaboration abilities.


• Ability to work independently and take ownership of technical solutions.


• Proactive mindset with a focus on continuous improvement.


• Strong attention to security, quality, and operational excellence.

What You'll Be Working With

• Microsoft Intune


• Microsoft Defender for Endpoint


• Microsoft Active Directory


• Windows LAPS


• Windows Autopilot


• Azure Arc


• Azure Stack HCI


• Azure Virtual Desktop


• Windows 365


• PowerShell


• Microsoft Graph


• ServiceNow

,[Design, implement, and maintain Microsoft Intune device management solutions., Manage configuration profiles, compliance policies, security baselines, update rings, and application deployments., Administer Windows Autopilot and device provisioning processes., Troubleshoot Intune policies, application deployments, device provisioning, and endpoint configuration issues., Improve endpoint performance, user experience, and deployment efficiency., Implement and maintain Windows LAPS, including password policies, auditing, and access control., Support Active Directory administration, including Group Policies, delegated administration, security hardening, and domain services., Participate in Domain Controller lifecycle activities, including deployment, maintenance, troubleshooting, and replication support., Configure and maintain Microsoft Defender for Endpoint policies and collaborate with Security teams on endpoint protection initiatives., Support Azure Arc and Azure Stack HCI environments, including onboarding, monitoring, configuration, and lifecycle management., Support Azure Virtual Desktop and Windows 365 environments, including image management, provisioning, monitoring, and troubleshooting., Create and maintain technical documentation, runbooks, knowledge base articles, and operational standards., Participate in endpoint compliance initiatives, audits, and continuous service improvements., Automate operational tasks using PowerShell and Microsoft Graph where appropriate.] Requirements: Endpoint Engineering, Modern Workspace, Endpoint Management, Microsoft Intune, MDM, MAM, Microsoft Defender, Microsoft Active Directory, Windows LAPS, Delegated administration, Security hardening, DNS, DHCP, Windows Autopilot, Windows Update for Business, Azure Virtual Desktop, Windows 365, Azure Arc, Azure Stack HCI administration, PowerShell, ITSM, ServiceNow, Change management, Analytical skills, Troubleshooting skills, Communication skills, Collaboration abilities, Microsoft Graph API automation, Endpoint security best practices, Zero Trust, Agile, DevOps