Senior EUC Engineer - Endpoint Management

BeOne continues to grow at a rapid pace with challenging and exciting opportunities for experienced professionals. When considering candidates, we look for scientific and business professionals who are highly motivated, collaborative, and most importantly, share our passionate interest in fighting cancer.

General Description:

Reporting to the Global EUC Manager, the Senior EUC Engineer - Endpoint Management is responsible for the design, engineering, implementation, automation, and continuous improvement of enterprise endpoint management technologies across a global environment.

The role provides senior-level technical expertise across Windows, MacOS, and mobile endpoint platforms, with a strong focus on Microsoft Intune, Windows Autopilot, Windows Update for Business, Microsoft Entra ID, and Azure Virtual Desktop.

The successful candidate will act as a technical subject matter expert for modern endpoint management and will contribute to endpoint architecture, security, operating system lifecycle management, application deployment, automation, troubleshooting, and service improvement. The role requires close collaboration with Security, Identity, Infrastructure, Service Management, application teams, regional IT teams, and external partners.

The candidate must be comfortable taking ownership of complex technical initiatives independently while collaborating effectively within a global EUC engineering team.

Key Responsibilities

Endpoint Engineering and Management

• Design, implement, and maintain enterprise endpoint management solutions for Windows 11, macOS, iOS/iPadOS, and Android using Microsoft Intune and Jamf Pro.
• Design, maintain, and continuously improve Windows Autopilot provisioning and device lifecycle processes.
• Engineer and maintain endpoint configuration policies, security baselines, compliance policies, and device configuration standards.
• Design and maintain operating system servicing strategies using Windows Update for Business, including feature updates, quality updates, and driver and firmware update management.
• Build, test, deploy, and maintain enterprise application packages and configurations using Microsoft Intune.
• Maintain and improve enterprise macOS management capabilities using Jamf Pro and Microsoft Intune.
• Support the design and administration of mobile device management and mobile application management controls.
• Collaborate with Security and Identity teams to implement endpoint-related Microsoft Entra ID, Conditional Access, device compliance, and modern authentication controls.
• Support the implementation and continuous improvement of endpoint security baselines and security configuration standards.
• Troubleshoot complex device identity, compliance, authentication, certificate, and application access issues across managed endpoint platforms.
• Develop and maintain automation solutions using PowerShell and Microsoft Graph to improve endpoint provisioning, configuration, reporting, and operational efficiency.
• Identify opportunities to eliminate manual processes through automation and standardized engineering solutions.
• Maintain technical documentation, architecture diagrams, configuration standards, operational procedures, and knowledge articles.
• Engineer, administer, and continuously improve the Azure Virtual Desktop environment, including session host configuration, image management, application delivery, user experience, and endpoint integration.
• Serve as a senior technical escalation point for complex endpoint and EUC incidents and problems.
• Perform root-cause analysis and implement permanent engineering solutions for recurring endpoint issues.
• Provide technical leadership for endpoint-related projects, migrations, and platform improvements.
• Evaluate new endpoint technologies and recommend improvements to the EUC architecture and service.
• Provide technical guidance and mentoring to EUC engineers, service desk teams, and regional IT teams.
• Participate in change management, problem management, and major incident processes as required.

Required Technical Skills

• Expert knowledge of Microsoft Intune and Windows 11 enterprise management.
• Strong experience with Windows Autopilot and Windows Update for Business.
• Strong experience with Microsoft Entra ID device identity, compliance, and endpoint-related Conditional Access controls.
• Advanced PowerShell scripting and automation skills; experience with Microsoft Graph is strongly preferred.
• Experience with enterprise application packaging and deployment.
• Experience with endpoint security configuration, troubleshooting, and security baselines.
• Strong working knowledge of Jamf Pro and macOS enterprise management.
• Working knowledge of iOS/iPadOS and Android enterprise management, including MDM and MAM controls.
• Working knowledge of Virtual Desktops, endpoint networking, authentication, and certificates.
• Experience with IT service management processes, including Incident, Problem, and Change Management.

Preferred Technical Skills

• Microsoft Configuration Manager (SCCM/MECM), including coexistence with or migration to modern cloud-based endpoint management.

• Citrix Virtual Apps and Desktops, VMware, Amazon WorkSpaces, Azure Virtual Desktop or other virtual desktop technologies.

• ServiceNow, Jira, or comparable IT service management tools.

Education, Certifications, and Experience:

• 7+ years of relevant experience in endpoint engineering, workplace technology, systems engineering, or a related field, preferably within a large, complex global enterprise environment.
• Demonstrated experience designing, implementing, and operating enterprise endpoint management solutions
• Proven engineering experience with Microsoft Intune, Windows 11, Windows Autopilot, and modern endpoint management.
• Demonstrated ability to troubleshoot complex endpoint, identity, application, and device management issues.
• Experience delivering technical initiatives through design, testing, implementation, documentation, and operational transition.
• Strong analytical and problem-solving skills, including structured root-cause analysis.
• Excellent written and verbal communication skills, with the ability to communicate technical concepts to technical and non-technical audiences.
• Ability to work independently, take technical ownership, prioritize effectively, and collaborate across global teams.
• Bachelor's degree in Computer Science, Information Technology, or a related discipline, or equivalent professional experience.
• Relevant Microsoft or endpoint management certifications are desirable.
• Familiarity with Agile delivery and ITIL service management practices is desirable.

Computer Skills: Windows 11, Microsoft 365, Microsoft Intune, Windows Autopilot, Windows Update for Business, Microsoft Entra ID, Microsoft Azure, Azure Virtual Desktop, Jamf Pro, macOS, iOS/iPadOS, Android Enterprise, PowerShell, Microsoft Graph, Active Directory.

Other Qualifications: Experience with ServiceNow, Jira, or other enterprise IT service management tools.

Travel, Physical Demands, and Work Environment

• Prolonged periods of sitting or standing may be required.
• Occasional travel between company sites may be required based on business and project needs.
• Additional physical requirements will be applied in accordance with applicable company policy and local legal requirements.

Salary Range Poland: 247,200 - 309,000 PLN

Global Competencies

When we exhibit our values of Patients First, Driving Excellence, Bold Ingenuity, and Collaborative Spirit, through our twelve global competencies below, we help get more affordable medicines to more patients around the world.

• Fosters Teamwork
• Provides and Solicits Honest and Actionable Feedback
• Self-Awareness
• Acts Inclusively
• Demonstrates Initiative
• Entrepreneurial Mindset
• Continuous Learning
• Embraces Change
• Results-Oriented
• Analytical Thinking/Data Analysis
• Financial Excellence
• Communicates with Clarity

We are proud to be an equal opportunity employer. BeOne does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, disability, national origin, veteran status or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.