Engineering Manager

Organization Background

The endpoint engineering team manages the client laptop, Application packaging, patching policy, Enterprise device performance, Virtualized desktop environment, and GPO policies services. We ensure the client laptops are secure, up to date with latest version of OS, software, security patches and policies. We ensure seamless experience to caregivers through automated software deployment.

What will you be responsible for?

• Define and execute the strategy for enterprise endpoint engineering, including OS lifecycle management, patching, application packaging, and proactive performance optimization in close collaboration with stakeholders.
• Lead a team of highly skilled engineers and administrators, fostering a culture of collaboration, accountability, and continuous improvement.
• Develop and maintain scalable desktop management systems using Intune, and Autopilot ensuring seamless provisioning, policy enforcement, and self-service enablement.
• Partner with enterprise architecture, cybersecurity, and support teams to align endpoint solutions with business objectives and security standards.
• Drive automation strategy with stakeholders: identify repetitive processes, evaluate automation opportunities, and guide implementation using PowerShell, Graph API, and Power Automate etc to improve efficiency and consistency.
• Lead application packaging and deployment initiatives using Intune / Flexera Admin Studio, ensuring timely and compliant distribution.
• Oversee OS and third-party patch management through Intune / PMPC, driving high levels of security compliance and reliability.
• Leverage endpoint performance and monitoring tools such as Lakeside Systrack (or similar) to proactively detect performance issues and enhance user experience.
• Guide the design, implementation, and governance of Group Policy Objects (GPO) and Intune configurations to maintain a secure, optimized client environment.
• Partner with vendors (e.g., Microsoft) to evaluate new capabilities, pilot emerging technologies, and integrate modern workplace innovations.
• Establish and maintain operational documentation, SOPs, and reporting frameworks for transparency and standardization
  
  
  

• Design and solutioning the patch management system using tools like Intune / Patch My PC.
• Packaging software through Intune / Admin Studio and test deployments.
• Deploying security policies/software through Microsoft Intune.
• Configure/schedule client laptop security patching.
• Review / Manage scripts (PowerShell, VB, Batch).
• Monitor, report out to management various security patching related KPI’s and prepare and execute corrective action plans to meet KPI’s.
  
  
  

• Minimum 12-16 years of experience in desktop management, Patch management, Intune migration.
• Experience in architecting / designing client device management solutions with Intune, PowerShell scripting and Azure update management.
• Familiarity in creating test, migration, and delivery plans for delivering software and security patches globally.
• Ability to troubleshoot technical problems, demonstrate problem solving.
• Experience with enterprise monitoring tools (e.g., Lakeside Systrack) and analytics-driven decision-making.
• Demonstrated leadership in building and developing high-performing engineering teams.
• Strong communication, stakeholder engagement, and executive reporting skills.
• Experience working in Agile/sprints in a global team setup.
• Bachelor’s degree in computer science, Business Management, or IS