Workplace Endpoint Engineer

Location:

Madrid, M, ESAre you a seasoned endpoint engineer with deep roots in traditional device management, but with an eye on the future of cloud-native workplace technology? Do you thrive in complex enterprise environments where SCCM, task sequences, and Windows imaging are your daily toolkit - while also embracing the shift towards modern management? If you're passionate about keeping large-scale endpoint estates running smoothly while helping bridge the gap to the cloud, this could be the role for you

About the TeamWe are a leading organisation committed to enhancing our digital workplace to support over 17,000 employees globally. Our goal is to provide seamless connectivity and collaboration through innovative technology solutions.

The Digital Workplace (DWP) team is a dynamic, forward-thinking group dedicated to enabling seamless connectivity and collaboration for all employees. We embrace agile methodologies and leadership practices to drive innovation and excellence across the organisation. We are a team of technology enthusiasts who are passionate about making a real difference - and we'd love for you to be part of that missionAbout the RoleWe're looking for an experienced Workplace Engineer to join our Digital Workplace team in Madrid.

In this role, you'll be the go-to expert for our traditional endpoint management infrastructure - owning and evolving our SCCM environment, Windows 11 deployment strategies, OSD task sequences, and enterprise imaging. At the same time, you'll actively contribute to our journey towards cloud-native management, working with Microsoft Intune, Azure AD / Entra ID, and modern security tooling. You'll play a critical role in maintaining stability and security across our 17,000+ employee endpoint estate.

If you love solving complex endpoint challenges and have a passion for both structured endpoint management and modern workplace innovation, we'd love to meet you

About YouYou are a hands-on endpoint engineering specialist who brings structured thinking, meticulous attention to detail, and a strong sense of ownership to everything you do. You are well-versed in ITSM best practices and understand how structured service management processes underpin reliable, high-quality IT operations. You take pride in building scalable, well-documented solutions and in sharing your knowledge with those around you. You're equally comfortable working independently on complex technical challenges and collaborating closely with colleagues. You thrive in agile environments, value continuous improvement, and are genuinely excited about contributing to the evolution of enterprise endpoint management.

Key ResponsibilitiesDesign, deploy and manage enterprise endpoint solutions using Microsoft SCCM (Configuration Manager) as the primary management platform, including site administration, software distribution, patch management and client health management across large enterprise environments.

Build, maintain and optimise OS Deployment (OSD) task sequences for Windows 11 bare metal imaging, in-place upgrades, driver management and WIM customisation at scale.

Own and manage the Windows 11 lifecycle, including compatibility assessment, feature update planning, phased rollouts and end-user impact assessment.

Manage enterprise software packaging and deployment, including application creation, detection methods, dependency management and deployment targeting within SCCM.Administer and optimise SCCM infrastructure, including site servers, distribution points, management points and boundary configuration.

Act as the L3 escalation point for complex endpoint incidents and problems, providing deep technical investigation, root cause analysis and permanent resolution for issues beyond the reach of L1/L2 support teams - operating in alignment with ITSM best practices including incident, problem and change management processes.

Apply ITSM frameworks (such as ITIL) in day-to-day operations, ensuring consistent and structured handling of service requests, incidents, problems and changes within the endpoint environment. Implement and maintain endpoint security using Microsoft Defender for Endpoint, Conditional Access policies and Zero Trust principles.

Create and maintain PowerShell scripts, including automation via Microsoft Graph API, for endpoint configuration, compliance remediation and administrative tasks.

Collaborate with the agile Endpoints team to develop and integrate new workplace features, products and services. Maintain thorough documentation of configurations, processes, task sequences and known issues to support knowledge sharing and operational resilience.

Champion Swiss Re's healthy and transparent risk culture by actively engaging in continuous risk accountability activities.

These are additional nice to haves: Familiarity with Windows Autopilot for zero-touch provisioni