Workplace Endpoint Engineer (Hybrid set up)

Are you a seasoned endpoint engineer with deep roots in traditional device management, but with an eye on the future of cloud-native workplace technology? Do you thrive in complex enterprise environments where SCCM, task sequences, and Windows imaging are your daily toolkit — while also embracing the shift towards modern management? If you're passionate about keeping large-scale endpoint estates running smoothly while helping bridge the gap to the cloud, this could be the role for you!

About the Team

We are a leading organisation committed to enhancing our digital workplace to support over 17,000 employees globally. Our goal is to provide seamless connectivity and collaboration through innovative technology solutions.

The Digital Workplace (DWP) team is a dynamic, forward-thinking group dedicated to enabling seamless connectivity and collaboration for all employees. We embrace agile methodologies and leadership practices to drive innovation and excellence across the organisation. We are a team of technology enthusiasts who are passionate about making a real difference — and we'd love for you to be part of that mission

About the Role

We're looking for an experienced Workplace Engineer to join our Digital Workplace team in Madrid. In this role, you'll be the go-to expert for our traditional endpoint management infrastructure — owning and evolving our SCCM environment, Windows 11 deployment strategies, OSD task sequences, and enterprise imaging. At the same time, you'll actively contribute to our journey towards cloud-native management, working with Microsoft Intune, Azure AD / Entra ID, and modern security tooling. You'll play a critical role in maintaining stability and security across our 17,000+ employee endpoint estate. If you love solving complex endpoint challenges and have a passion for both structured endpoint management and modern workplace innovation, we'd love to meet you!

About You

You are a hands-on endpoint engineering specialist who brings structured thinking, meticulous attention to detail, and a strong sense of ownership to everything you do. You are well-versed in ITSM best practices and understand how structured service management processes underpin reliable, high-quality IT operations. You take pride in building scalable, well-documented solutions and in sharing your knowledge with those around you. You're equally comfortable working independently on complex technical challenges and collaborating closely with colleagues. You thrive in agile environments, value continuous improvement, and are genuinely excited about contributing to the evolution of enterprise endpoint management.

Key Responsibilities

• Design, deploy and manage enterprise endpoint solutions using Microsoft SCCM (Configuration Manager) as the primary management platform, including site administration, software distribution, patch management and client health management across large enterprise environments.
• Build, maintain and optimise OS Deployment (OSD) task sequences for Windows 11 bare metal imaging, in-place upgrades, driver management and WIM customisation at scale.
• Own and manage the Windows 11 lifecycle, including compatibility assessment, feature update planning, phased rollouts and end-user impact assessment.
• Manage enterprise software packaging and deployment, including application creation, detection methods, dependency management and deployment targeting within SCCM.
• Administer and optimise SCCM infrastructure, including site servers, distribution points, management points and boundary configuration.
• Act as the L3 escalation point for complex endpoint incidents and problems, providing deep technical investigation, root cause analysis and permanent resolution for issues beyond the reach of L1/L2 support teams — operating in alignment with ITSM best practices including incident, problem and change management processes.
• Apply ITSM frameworks (such as ITIL) in day-to-day operations, ensuring consistent and structured handling of service requests, incidents, problems and changes within the endpoint environment.
• Implement and maintain endpoint security using Microsoft Defender for Endpoint, Conditional Access policies and Zero Trust principles.
• Create and maintain PowerShell scripts, including automation via Microsoft Graph API, for endpoint configuration, compliance remediation and administrative tasks.
• Collaborate with the agile Endpoints team to develop and integrate new workplace features, products and services.
• Maintain thorough documentation of configurations, processes, task sequences and known issues to support knowledge sharing and operational resilience.
• Champion Swiss Re's healthy and transparent risk culture by actively engaging in continuous risk accountability activities.

These are additional nice to haves:

• Familiarity with Windows Autopilot for zero-touch provisioning as a complement to traditional OSD approaches.
• Experience with co-management (SCCM + Microsoft Intune) and familiarity with transitioning workloads from on-premise to cloud-native endpoint management.
• Hands-on experience with Microsoft Intune, including device configuration profiles, compliance policies and application deployment in an enterprise environment.
• Working knowledge of Azure AD / Entra ID, including Conditional Access policies, SSO and MFA in the context of endpoint security and identity management.
• Familiarity with Microsoft Defender for Endpoint, including endpoint security management, threat and vulnerability management and security baseline application.
• Experience with BIOS/UEFI management and hardware vendor tools (e.g., Dell Command, HP BIOS Config Utility) for enterprise device configuration.
• Understanding of Active Directory and Group Policy administration in the context of endpoint management.
• Experience with Microsoft Deployment Toolkit (MDT) as a complement to SCCM-based deployments.
• Knowledge of Windows 365 and/or Azure Virtual Desktop environments.
• Familiarity with Windows Autopatch for automated update management.
• Experience with mobile device management (MDM) for iOS and Android platforms, including device enrolment, configuration profiles, compliance policies and app management — ideally managed through Microsoft Intune,
• University degree or equivalent qualification in engineering, computer science or a related field.

Our company has a hybrid work model where the expectation is that you will be in the office at least three days per week.

For Spain the base salary range for this position is between EUR 42,000 and EUR 70,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.