Endpoint Engineer

In this role you will be a key contributor in Fitch’s global infrastructure, delivering advanced endpoint management and platform engineering across Windows and Intune to ensure secure, reliable user experiences. You will modernize device provisioning, drive automation, and uphold Zero Trust principles in a fast-paced, AI-enabled environment. You’ll work with cross-functional teams to standardize policies, improve fleet stability, and support enterprise applications. This is a hands-on opportunity to shape our endpoint strategy at scale.

• Hybrid work: 2–3 days in office
• Learning and mobility programs
• Retirement and financial wellness
• Comprehensive healthcare
• Parental leave
• Volunteer days

• Migrate legacy Group Policy to CSP-based Intune and maintain governance across fleets
• Oversee hardware lifecycle management and driver/firmware automation (HP/Dell) to boost stability
• Modernize Windows Autopilot and provisioning workflows; resolve CSP conflicts
• Package, test, and deploy enterprise apps via MECM/Intune with compliance.
• Configure and support core developer tooling (VS Code, Python, Git) for AI workloads; manage GPU drivers and WSL2/containers
• Handle advanced incident resolution, patching, vulnerability remediation, and endpoint health monitoring; contribute to automation and policy improvements
• Create and maintain runbooks and cross-team documentation; collaborate on cloud identity, security hardening, and software lifecycle management
• Participate in on-call rotation and drive root-cause analysis to improve user experience

• 3–5+ years in enterprise endpoint engineering or advanced support
• Windows 11, Azure AD / Entra ID, Intune (Endpoint Manager), MECM, and co-management
• Active Directory, Group Policy, RSAT
• Intune configuration and compliance policy management
• LAPS and least-privilege models; Privilege Management
• Microsoft 365 Apps deployment and updates
• Networking fundamentals (DNS, DHCP, VPN, Proxy)
• Windows Autopilot, zero-touch provisioning, cloud-first imaging
• Intune application management (Win32, MSI, MSIX, store apps) and configuration profiles
• PowerShell scripting and automation
• Zero Trust, conditional access, identity-based controls
• AI/ML workload tooling (GPU drivers, WSL2/containers) and governance for tooling
• Developer tooling support (VS Code, Python, CLI); Git workflows
• Strong documentation and collaboration skills

• collaboration
• clear communication
• ownership mindset
• Intune / Endpoint Manager
• MECM
• Autopilot