Level 2 Support Engineer

About the role

The Level 2 Support Engineer will ensure the reliability, security and compliance of Windows endpoints and mobile devices across the organisation. You will work with SCCM, Microsoft Intune and Azure AD to deliver modern workplace solutions and support day‑to‑day operations.

Key responsibilities

• Manage and support Windows endpoints using SCCM, Microsoft Intune and Microsoft Entra ID (Azure AD).
• Administer the full lifecycle of endpoints – provisioning, configuration, deployment, compliance monitoring and retirement.
• Oversee iPad and mobile device management through Intune, handling enrolment, policy enforcement, app deployment and decommissioning.
• Configure and maintain Intune compliance policies, conditional access, co‑management with SCCM and security baselines.
• Administer Microsoft Endpoint Configuration Manager (SCCM/MECM), including collections, task sequences, software distribution and client health.
• Deploy applications, updates and scripts via SCCM and Intune; package and test enterprise software, including custom Office deployments with ODT.
• Monitor patch compliance, deploy Windows and third‑party updates, and automate third‑party patching with Patch My PC.
• Design, implement and troubleshoot Group Policy Objects and endpoint security configurations.
• Conduct vulnerability scanning using Tenable and assist in remediation activities.

Required profile

• Proven experience in Windows endpoint management, SCCM and Microsoft Intune.
• Hands‑on knowledge of Azure AD, Conditional Access and co‑management scenarios.
• Familiarity with mobile device management for iOS devices.
• Experience in software deployment, patch management and Group Policy administration.

Required skills

• Microsoft SCCM / MECM
• Microsoft Intune
• Microsoft Entra ID (Azure AD)
• Conditional Access
• Co‑management (SCCM + Intune)
• Office Deployment Tool (ODT)
• Patch My PC
• Tenable vulnerability scanner
• Group Policy Objects (GPO)
• iPad / iOS device management