Windows Endpoint Engineer (Microsoft Intune)

Location: Pavilion Damansara, Kuala Lumpur, Malaysia; hybrid with at least three days per week in the office

Company

Marsh is a global risk, reinsurance, capital, people and investments, and management consulting company serving clients in 130 countries with more than 95,000 colleagues.

What you will do

• Engineer and maintain the enterprise Windows endpoint platform across laptops, desktops, virtual endpoints and specialist devices.
• Design provisioning and lifecycle workflows using Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only device scenarios.
• Manage Windows configuration, servicing, updates, drivers, BIOS, firmware, UEFI and hardware standards.
• Improve application packaging, deployment, updates, remediation and compatibility for Microsoft 365 Apps and enterprise Windows applications.
• Implement endpoint security and compliance controls including BitLocker, Secure Boot, Defender, Windows Hello for Business and security baselines.
• Lead complex Tier III investigations, root-cause analysis, technical governance, documentation, roadmaps and continual improvement using telemetry and digital employee experience data.

Requirements

• Strong experience engineering and supporting Windows 11 endpoints in a large, distributed enterprise environment.
• Hands-on experience with Microsoft Intune, Entra ID, Windows Autopilot, and cloud-based Windows configuration and compliance.
• Experience with Windows deployment, servicing, recovery and troubleshooting, including feature updates, quality updates, drivers and firmware.
• Strong knowledge of application deployment, update management and compatibility troubleshooting for Microsoft 365 Apps and enterprise Windows applications.
• Practical PowerShell automation skills and experience with APIs, Microsoft Graph, JSON, XML or CSV.
• Good understanding of endpoint security, identity, compliance and access controls, including BitLocker, Secure Boot and Windows Hello for Business.
• Ability to analyse complex technical problems, communicate with technical and non-technical stakeholders, and produce high-quality engineering documentation.

Nice to have

• Deep experience with Intune, Entra ID, Windows Autopilot, Windows Update for Business and modern management migration.
• Advanced PowerShell, Microsoft Graph, proactive remediations, Azure Automation or comparable workflow tooling.
• Experience with endpoint analytics, digital employee experience platforms, ServiceNow or hardware asset management integrations.
• Knowledge of Defender, certificates, authentication, conditional access, enterprise laptop hardware, drivers, BIOS, firmware, Intel and Windows on Arm devices.
• Understanding of Active Directory, Group Policy and Microsoft Configuration Manager, including transitions toward modern management.
• Experience producing technical standards, design documents, operational guidance and root-cause analyses for global services.
• Excellent collaboration and communication skills, a proactive improvement-focused approach, and the ability to work independently while managing competing priorities.

Culture & Benefits

• Global engineering work supporting approximately 95,000 colleagues and a diverse Windows device estate.
• Open, collaborative culture focused on standardisation, measurable service improvement and colleague outcomes.
• Professional development opportunities, supportive leaders, career opportunities and benefits and rewards supporting well-being.
• Inclusive and flexible work environment; colleagues are expected to work in their local office or onsite with clients at least three days per week.