EUC Engineer (Endpoint Management and Intune)

EUC Engineer (Endpoint Management and Intune)Business area Digital ServicesLocation LondonJob ID 324994Location – London, with hybrid working in line with departmental requirementsLane Clark & Peacock (LCP) is an award-winning partnership operating across pensions and benefits, investments, insurance, energy, health, sports and data analytics. We combine industry experience with technology-led innovation to deliver high-quality advice, services and digital solutions to our clients.As endpoint security, software governance and modern workplace technologies continue to evolve, LCP is strengthening its End User Computing (EUC) engineering capability. This role will help drive improvements in endpoint governance, modern device management, application lifecycle management, automation and secure endpoint standards across the firm.The EUC Engineer (endpoint management and Intune) is responsible for the engineering, configuration, automation, and continuous improvement of LCP’s endpoint and modern device management ecosystem.This role will focus primarily on endpoint engineering and Microsoft Intune, with particular emphasis on vulnerability mitigation, device compliance, automation and the delivery of a scalable, resilient end user computing experience across approximately 1,400 colleagues.What will you be doing?Technical Expertise & SupportReduce recurring operational issues through engineering improvements and automationProvide technical guidance and enablement to other support staff and technical teamsAct as a third-line escalation point for Microsoft Intune and endpoint management issuesDiagnose and resolve complex technical incidents escalated by 1st and 2nd line teamsEnsure stable performance and configuration of Windows, macOS, iOS and Android devices managed via IntunePlatform Management & AutomationConfigure and maintain Intune policies, configuration profiles, compliance rules and security baselinesDevelop and maintain automation and scripting capabilities to reduce manual effort and improve endpoint consistency and resilienceBuild, improve and support Windows Autopilot provisioning processesManage application packaging, deployment and lifecycle management within IntuneMonitor platform health, reporting outputs, configuration drift and usage trendsWork closely with Infrastructure, Security and Service Delivery teams to enhance endpoint security and user experienceSupport and enable frontline support services through documentation, technical guidance, automation and engineering improvementsContribute to the organisation’s endpoint roadmap and modern workplace strategyIdentify opportunities to automate, streamline and improve device management processesProduce and maintain documentation, runbooks and technical knowledge articlesGovernance, Compliance and SecurityOwn and improve governance for endpoint applications, including packaging standards, approved application catalogues, automated patching and lifecycle management through platforms such as Patch My PCMaintain secure endpoint baselines in partnership with the Infrastructure team to support compliance, vulnerability reduction and secure-by-default endpoint standardsSupport the firm’s software governance approach through controlled application deployment, patch automation and the reduction of unmanaged endpoint softwareEnsure device management practices align with organisational security standards and regulatory requirementsSupport the change control process and attend CAB meetings where requiredMaintain accurate configuration and asset data across relevant systemsWhat skills and experience are we looking for?Experience managing packaging and automated software patching solutions (e.g. Patch My PC)Working knowledge equivalent to Microsoft Endpoint Administrator (MD-102) certification levelSignificant experience administering Microsoft Intune in a medium or large organisationStrong understanding of modern device management (MDM/MAM) approachesExcellent knowledge of Windows 11, Entra, Conditional Access and AutopilotUnderstanding of endpoint vulnerability management and secure endpoint principlesAdvanced troubleshooting skills across Windows and mobile operating systemsExperience using PowerShell for automation, configuration and reportingA clear and confident communicator, able to explain technical concepts effectivelyStrong documentation and process-writing capabilitiesAbility to balance operational stability, user experience and security requirementsExperience reducing reliance on local administrator access through modern endpoint management methodsFamiliarity with Zero Trust and secure‑by‑default endpoint strategiesExperience managing macOS devices via Intune or alternative platforms (e.g. Jamf)Understanding of security baselines, endpoint protection and the M365 security stackExperience working in an ITIL‑aligned environmentKnowledge of Microsoft Defender for Endpoint and related technologiesWhat’s in it for you?Take a look at our Glassdoor and Career stories pages to see why our people love being here! As well as joining a certified B-Corp, multi‑award winning, fun, collaborative, people first organisation where your personal and professional skills will be developed to make you the best you can be, we offer an attractive benefits package designed to promote your overall wellbeing so that you are able to perform to your full potential both in and out of work. Currently our core benefits package includes:For you:Hybrid working (see top of the advert for details)Professional study support (where applicable)Access to our internal Wellbeing, LGBTQ+, Multicultural and Women’s networksFor your family:Life assuranceIncome protectionEnhanced maternity/paternity/adoption and shared parental leaveFor your health:26 days annual leave (pro-rata for part‑time working) plus bank holidays (most of which can be taken flexibly!) with options to buy & sell holidayPrivate medical insuranceDiscounted gym memberships, critical illness and dental insurance through our flexible benefitsCycle to work schemeDigital GP servicesFor your wealth:Discretionary bonus schemeSeason ticket loansFor others:Volunteering opportunitiesFor the environment:Electric vehicle salary sacrifice scheme (qualifying period applies)And much more!We continuously strive to build an inclusive workplace where all forms of diversity are valued, including age, background, disability, gender, gender identity, gender expression, race, religion or sexual orientation.LCP is committed to making our opportunities accessible to all and would welcome you getting in touch to let us know if an adjustment can be made to help with your application. This may be extra time for assessments, pre‑interview site visits, interview structure or questions, or asking us about building accessibility. Whatever it may be, please get in touch via our dedicated email address - accessibilityaware@lcp.uk.com to discuss how we can support you with your application.Recruitment agenciesLCP operates a Preferred Supplier List (PSL) for recruitment agencies which is reviewed annually. We do not accept unsolicited CVs from agencies who are not part of our currentPSL. LCP only pay agency fees where we have a signed agreement in place, and the agency has been instructed by a member of our recruitment team to supply CVs via the Applicant Tracking System (ATS) for a legitimate, open vacancy. If this process is not adhered to, LCP reserve the right to contact these candidates directly and have discussions with them without paying any agency fees. We do not pay agency fees when speculative and unsolicited CVs are submitted to any employee or Partner at LCP. #J-18808-Ljbffr