Senior Endpoint Management Engineer

📣 Would you like to join a company that puts people at the heart of its concerns? We are waiting for you! Since 2007, Extia, an IT consulting company, has been offering a unique approach in its field by combining well-being at work and performance.

Our philosophy at Extia is “First who, then what", so let's go for it!

🚀 First who?

• You have effective communication skills, allowing you to collaborate seamlessly across multiple time zones.
• You are capable of remote and local team management, coordinating resources efficiently (including team members in Romania, Mexico, and Brazil).
• You possess strong organizational and prioritization skills to keep global operations running smoothly.
• You are open to giving and receiving constructive feedback and thrive in collaborative decision-making environments.

This role is hybrid, requiring a mandatory 5 days per month in the office (Bucharest).

🚀 Then what?

Device Fleet Management Specialist (IT Support), with the following tasks:

• Oversee the deployment, management, and security of endpoint devices, including physical laptops and virtual desktops (VDI/AVD).
• Manage the full device lifecycle (procurement, provisioning, maintenance, retirement/wipe).
• Manage device provisioning and configuration through Microsoft Intune and Windows Autopilot, in both hybrid and full Entra Join environments.
• Administer Compliance Policies, Configuration Profiles, and Group Policy Objects (GPO) alongside Intune policies (co-management).
• Configure and manage Conditional Access in conjunction with Azure AD/Entra ID.
• Ensure compliance with corporate security frameworks (e.g., CIS Benchmark) and configure BitLocker, Windows Hello for Business, and MFA policies.
• Administer Windows Update for Business, Application Protection Policies (APP), Mobile Application Management (MAM), and endpoint security solutions (Trend Micro).
• Monitor endpoint performance and implement automation via PowerShell, Proactive Remediations, and Intune Scripts.
• Manage application packaging, deployment, and lifecycle (Win32 apps, MSI, LOB apps) via Intune.
• Collaborate with IT support, security, and infrastructure teams to resolve endpoint issues and drive global standardization and governance.
• Support roadmap evolution and adapt endpoint management strategies to business needs.

Required technical skills:

• Proven experience in endpoint and device management (Microsoft Intune, Windows Autopilot, Azure AD/Entra ID).
• Experience with hybrid environments (GPO, co-management) and virtual desktops (VDI/AVD).
• Solid automation and scripting skills, specifically using PowerShell.
• Familiarity with security and compliance tools (BitLocker, Windows Hello for Business, MFA, Trend Micro).
• Experience in application packaging (Win32, MSI, LOB) and patch management.
• Ability to develop reports and dashboards for compliance metrics and device health.

🚀 Do you recognize yourself in the "Who" and represent the "What"? Apply and let's talk!