Lead Configuration Engineer

In this Lead Configuration Engineer role you drive ownership of endpoint standards and lifecycle governance across 30,000+ devices in the UK and Europe, with hands-on leadership over Intune, Ivanti Neurons EPM, and app packaging. You will mentor a small team while ensuring secure, compliant, and well-governed client-management services aligned to our standards. You will influence strategic upgrades, asset records, and change control to support operations at scale. This is a hands-on leadership role that shapes our endpoint strategy.

• competitive salary with annual company bonus
• pension scheme (company contribution of up to 12%)
• 25 days holiday + bank holidays
• Staff Discount
• Reward and Recognition events

• Technical ownership and leadership of MS Intune, Ivanti Neurons EPM and related client-management services
• Define and assure engineering standards for application packaging, testing, deployment and maintenance across Windows clients
• Lead device provisioning, configuration, compliance, patching, upgrading and retirement across the endpoint lifecycle
• Own governance and security posture across Microsoft 365 and end-user computing platforms to organisational standards
• Deliver project and system-upgrade milestones with quality, change-control, testing and on-time delivery
• Maintain reliable asset-management and configuration records supporting audits, performance and lifecycle decisions
• Identify, assess and prioritise new requirements with structured development, testing, pilots, deployment and handover
• Coach and mentor colleagues to improve engineering quality, resilience and knowledge sharing

• Experience in end-user computing, endpoint engineering, device management and application deployment
• Experience with Ivanti Neurons for Endpoint Management (EPM) or similar enterprise endpoint management platform
• Hands-on administration of Microsoft Intune in a large enterprise
• Strong knowledge of enrolment, configuration profiles, compliance policies, application deployment and troubleshooting
• Ability to plan technical changes with testing, pilots, change and handover controls
• Strong incident investigation, problem solving and root-cause skills
• Experience with Windows Autopilot, endpoint security, update management and proactive remediation
• Strong Windows application packaging experience (Win32, MSI, upgrades, uninstall)
• Working knowledge of PowerShell and scripting for deployment, automation, detection and remediation
• Understanding of Windows OS, endpoint hardware, security, vulnerability remediation and lifecycle management
• Understanding of Microsoft 365, identity, networking, certificates, VPN and Wi-Fi dependencies

• Leadership and ability to balance people management with hands-on work
• Strong communication and coaching abilities
• Problem solving and thoughtful troubleshooting
• Ivanti Neurons for Endpoint Management (EPM)
• Microsoft Intune
• Windows Autopilot