End User Computing Engineer (m/f/x/)

For our department IT Service Desk within General Services, we are looking for a (an):

End User Computing Engineer (m/f/x/)

Main duties:

Endpoint Management and Device Lifecycle

• Administer and evolve Intune (primary) and SCCM/MECM (co-management), driving the progressive transition of workloads to Intune
• Create and maintain configuration profiles, compliance policies and automation scripts
• Manage the full device lifecycle across laptops, desktops and mobile/MDM (provisioning, inventory, cleanup, decommissioning), enforcing security baselines and conditional access, and resolving complex device/OS/deployment issues
• Manage enterprise printing and workplace peripherals (secure/follow-me printing, driver deployment and configuration)
  

Application Packaging and Deployment

• Package, sequence and test enterprise applications (MSI, MSIX, App-V, Win32/IntuneWin, PSADT) for silent, unattended installation
• Deploy and maintain applications through Intune and SCCM/MECM, managing the catalogue (versioning, dependencies, detection rules, retirement)
• Automate packaging and deployment workflows with PowerShell

OS, Driver and Patch Management

• Design and maintain Windows OS deployment (imaging, SCCM/MECM task sequences, Autopilot / zero-touch provisioning)
• Manage the driver and firmware lifecycle and hardware model onboarding across the fleet
• Plan and run Windows migrations (e.g. Windows 11) and the patching/update strategy (Windows Update for Business, WSUS/SCCM)

Monitoring, Reporting and User Experience

• Monitor device health and the digital employee experience and report on compliance, software deployment and patch status.

Documentation, Standards and Projects

• Maintain packaging, configuration and architecture (EUC) documentation, and act as the Windows client subject-matter expert.
• Deliver workplace projects (OS migrations, Autopilot, modern workplace transformation, printing, MDM etc.) and drive continuous improvement with IT and business stakeholders.

Required profile:

Minimum required criteria:

• Bachelor's degree in computer science / IT, or an equivalent combination of education and experience that satisfies the requirements of the position
• Proven experience as an End-User Computing / workplace engineer, with a strong specialisation in Microsoft Windows client environments
• Hands-on expertise in application packaging and software deployment (MSI, MSIX, App-V, Win32/IntuneWin, PSADT) and silent/unattended installations
• Hands-on experience with endpoint deployment technologies: Microsoft Intune and SCCM/MECM (packages, applications, task sequences)
• Hands-on experience with Windows OS deployment (imaging, task sequences,Autopilot) and driver/BIOS lifecycle management
• Solid scripting and automation skills (PowerShell)
• Good analytical skills with the ability to clearly explain and summarise ideas
• Good verbal and written communication skills in English

Desired or to be required criteria:

• Microsoft Intune / Endpoint Manager
• SCCM / MECM (co-management scenarios)
• Windows 10 / Windows 11 administration and migration
• Application packaging (MSI, MSIX, App-V, Win32/IntuneWin, PSADT)
• Windows Autopilot and zero-touch provisioning
• OS imaging, task sequences and driver management
• Entra ID and Active Directory (device-centric usage)
• Patch and update management (Windows Update for Business, WSUS)
• MDM concepts and security compliance
• Digital employee experience / monitoring tools (e.g. Nexthink)
• Relevant Microsoft certifications (e.g. MD-102 Endpoint Administrator)
• Scripting and automation

The ideal candidate:

• Autonomous, methodical and detail-oriented, with a strong drive for automation and standardisation
• Knowledge of Luxembourgish or any other language is considered an asset