The EndPoint Infra Engineer manages the technical foundations of Windows environments (GPO, AD, Intune, SCCM), ensures MRO (Maintenance in Operational Condition), and leads transformation projects related to workstation infrastructure: SCCM updates, Intune tenant configuration, NDES updates, etc.

They act as a reference for the lower layers of the workstation, ensuring their consistency, security, and compatibility with the overall ecosystem.

Main tasks

• Manage EndPoint infrastructure components: Active Directory, GPO, Intune, SCCM, WSUS, scripts, NDES, Appregistration

• Lead Run and MRO activities: patches, technical incidents, capacity planning, tuning

• Contribute to technical projects (SCCM migration, Intune evolution, co-management, RBAC, etc.)

• Implement security strategies: update monitoring, maintain compliance, maintain operational condition

• Participate in action plans following security audits, incidents, and non-compliance issues

• Keep technical documentation up-to-date (diagrams, repositories, configurations, guides)

• Participate in technical committees and project/run/support coordination meetings

• Automate repetitive tasks (PowerShell, Intune, scripts) and integrate tools into the IS

• Monitor park health indicators (compliance, patches, error rates)

• Stay updated on Microsoft technology developments, security risks, and best practices