IT infrastructure engineer -L2

Job Description

We are seeking an experienced Endpoint Management Engineer to join our dynamic team. In this role, you will have the opportunity to manage and support enterprise endpoints across a range of platforms, including Windows, macOS, iOS, and Android, with advanced tools such as Intune, Ivanti EPM, JAMF, and LRS print management. This is an exciting opportunity for a professional who thrives in a fast-paced, global environment and is passionate about ensuring security, compliance, and operational efficiency deploying and maintaining Windows Autopilot, mobile device BYOD management, and patch management solutions. What will you do? Provide L2 support for macOS/iOS-related escalations, ensuring timely resolution of complex issues. Manage and support Windows devices enrolled via Autopilot for seamless provisioning. Develop and maintain Intune policies, compliance baselines, and security settings for Windows endpoints. Oversee the deployment, configuration, and management of macOS, iOS, iPadOS, and tvOS devices using Jamf Pro . Android BYOD devices via Intune MDM. Develop and maintain Jamf policies, configuration profiles, Smart Groups, Static Groups, and Patch Management strategies . Manage Self-Service portals, enrolment workflows, and automated device provisioning . Good Understanding of (Okta, Azure AD, LDAP) for authentication and device access control. Perform log analysis (Console, Jamf logs, system logs) to diagnose root causes of performance or security issues. Develop custom scripts (Bash, Python, AppleScript, or Jamf API) to automate workflows and enhance system performance. Excellent problem-solving skills, analytical mindset, and ability to work under minimal supervision . Automate device provisioning, application deployment, and updates via Intune & Windows Update for Business (WUfB) . Troubleshoot Intune, Autopilot enrolment failures, policy conflicts, and performance issues . Manage Ivanti Endpoint Manager (EPM) for patching Windows devices , ensuring compliance with security policies. Monitor patch success rates, troubleshoot failures, and generate compliance reports. Optimize EPM performance, integration with Intune, and policy enforcement strategies . Enforce app protection policies, remote wipe, and data loss prevention (DLP) for corporate apps. Administer LRS print management solutions for enterprise print control. Manage printers , ensuring proper driver deployment, security policies, and print queue management . Troubleshoot print failures, driver conflicts, and LRS system integrations . Implement device security policies, endpoint protection, and compliance baselines in Intune & Ivanti EPM . Monitor BitLocker encryption, Defender for Endpoint integration, and identity access management (IAM) . Develop and maintain custom scripts for device enrolment, policy application, and compliance enforcement . Diagnose and resolve Outlook performance issues, crashes, and email delivery failures . What will you bring to ESP? 3+ years of proven experience working with Intune, Autopilot, and Ivanti EPM for managing Windows and mobile endpoints. Demonstrated experience managing and supporting multi-platform environments, including macOS, Windows, iOS, and Android devices. Proven ability to interact with clients and communicate complex technical issues and solutions effectively. Microsoft Certified: Modern Desktop Administrator Associate (Exam MD-100 and MD-101) Ivanti Endpoint Manager (EPM) Certified Professional (Desirable) Expertise in Jamf Pro for managing Apple devices (macOS, iOS, iPadOS, tvOS)-(Desirable)