Modern Workplace Endpoint Engineer

As a Modern Workplace Endpoint Engineer, you will help design, build and operate enterprise endpoint-management and device-migration capabilities for a complex international separation programme. You will work hands-on with Microsoft Configuration Manager (MECM), Windows 11 imaging and Operating System Deployment, application packaging, patch management, device staging and IT Corner services. Working across multiple countries and alongside infrastructure, network, identity, security and service-management teams, you will support pilots and controlled migration waves while ensuring endpoint security, asset accuracy, operational readiness and uninterrupted service for end users.

Come join us:

You will be joining the Workplace Engineering Practice team with the best of Modern Workplace Consultants, focused on advancing the state of the art in the Modern Workplace Solution areas. Specifically, our goals are to drive customer adoption through Technical Leadership on the most strategic, complex and transformative consulting projects. Our team is at the forefront of innovation, driving value across the entirety of the customer’s digital journey through repeatable and customised cutting-edge solutions powered by the Microsoft Cloud. By joining our team you’ll have the opportunity to contribute to life-changing innovations that impact billions of people worldwide.

What you’ll do:

Design, build and validate Microsoft Configuration Manager (MECM) environments, including SQL databases, site system roles, boundaries, discovery, Distribution Points, Management Points, PXE, certificates and role-based administration.

Create and maintain Windows 11 light images and MECM Operating System Deployment task sequences, integrating drivers, corporate applications, endpoint security agents, encryption, browser and Microsoft Office hardening, and AppLocker controls.

Review application inventories and import, adapt or repackage country-specific applications using agreed packaging standards and repositories, validating content distribution and hardware compatibility.

Prepare and validate IT Corner and device-staging capabilities, including technical workstations, secure storage, imaging connectivity, NAC exceptions and end-to-end integration with DNS, DHCP, Active Directory, PKI, KMS, network and security services.

Plan and execute country pilots and controlled migration waves, including device assessment, user appointments, preparation and handover, Swap-and-Remaster rotation, first-login checks, hypercare and management of engineering, departmental, loan and hardware-refresh exceptions.

Operate and troubleshoot endpoints and MECM services, supporting patching through WSUS and Patch My PC, client health, application deployment, device diagnostics, remastering, warranty coordination, stock and loan-device management.

Maintain accurate asset, peripheral and ownership records in source and target CMDBs; reconcile migrated, returned, wiped, reimaged, retired and in-stock devices throughout the programme.

Produce architecture, detailed design, deployment, installation, test, operational, disaster recovery, training and handover documentation, and collect evidence against agreed acceptance criteria.

Coordinate delivery across multiple countries and work effectively with Client Management, End User Support, Network, Hosting, IAM, Security, Service Desk and local site teams, while protecting business and service continuity.

.

5+ years of hands-on experience designing, implementing and supporting Microsoft Configuration Manager environments and Windows endpoint deployment solutions in complex enterprise organisations.

Strong knowledge of MECM architecture and administration, including SQL, site roles, boundaries, discovery, collections, RBAC, Distribution Points, Management Points, PXE, reporting, certificates and client-health monitoring.

Advanced experience with Windows 11 imaging, Operating System Deployment, task sequences, driver management, application packaging and distribution, preferably including enterprise packaging repositories or tools comparable to Instlib.

Practical experience with enterprise patch management using WSUS and preferably Patch My PC, including synchronisation, deployment rings, compliance reporting and maintenance activities.

Working knowledge of Active Directory, DNS, DHCP, PKI, KMS, network and firewall dependencies, NAC, endpoint encryption and security controls such as AppLocker, browser and Office hardening, antivirus exclusions and endpoint security agents.

Experience planning and delivering high-volume, multi-site endpoint migrations, pilots and waves, including device staging, Swap-and-Remaster processes, user appointment coordination, hypercare and operational handover.

Experience providing L2/L3 endpoint support and working with IT Corner or field-support models, including device provisioning, replacement, diagnostics, remastering, repairs, warranty handling, stock and peripheral management.

Experience with ITSM and CMDB processes, including incident, request, change and problem management, asset reconciliation, inventory accuracy, audit evidence and SLA-driven delivery.

Ability to create and maintain technical and operational documentation, test plans, test evidence, deployment runbooks, user guidance, training materials, disaster recovery procedures and service-operation documentation.

Strong analytical, troubleshooting, stakeholder-management and communication skills, with the ability to work across countries and coordinate dependencies with infrastructure, identity, network and security teams.

Microsoft endpoint-management certifications such as MD-102 are desirable; equivalent demonstrable Microsoft Configuration Manager and Windows deployment expertise will also be considered.

About you:

Characteristics that can spell success for this role:

Embrace challenges with a keen intellect and a thirst for knowledge.

Collaborate seamlessly, fostering open and effective communication (English)

• •Embrace creativity and explore groundbreaking solutions.
• •Availability to work on-site in Madrid (Getafe)

Enjoy your career

Some of the best things about working at Avanade:

Opportunity to work for Microsoft’s Global Alliance Partner of the Year (14 years in a row), with exceptional development and training (minimum 80 hours per year for training and paid certifications)

Real-time access to technical and skilled resources globally

Dedicated career advisor to encourage your growth

Engaged and helpful coworkers genuinely interested in you

Find out more about some of our benefits here .

A great place to work

As you bring your skills and abilities to Avanade, you’ll get distinctive experiences, limitless learning, and ambitious growth in return. As we continue to build our diverse and inclusive culture, we become even more innovative and creative, helping us better serve our clients and communities. You’ll join a community of smart, supportive collaborators to lift, mentor, and guide you, and to lean on your expertise. You get a company purpose-built for business-critical, leading-edge technology solutions, committed to improving the way humans work, interact, and live. It’s all here, so take a closer look!

We work hard to provide an inclusive, diverse culture with a deep sense of belonging for all our employees. Visit our Inclusion & Diversity page .

Create a future for our people that focuses on

Expanding your thinking • Experimenting courageously • Learning and pivoting

Inspire greatness in our people by

Empowering every voice • Encouraging boldness • Celebrating progress

Accelerate the impact of our people by

Amazing the client • Prioritizing what matters • Acting as one

Learn More

To learn more about the types of projects our Infrastructure team works on, check out these case studies: *

VentilatorChallengeUK manufactures 2 years’ worth of vent