For our department IT Service Desk within General Services, we are looking for a (an):
End User Computing Engineer (m/f/x/)
Main duties:
Endpoint Management and Device Lifecycle
- Administer and evolve Intune (primary) and SCCM/MECM (co-management), driving the progressive transition of workloads to Intune
- Create and maintain configuration profiles, compliance policies and automation scripts
- Manage the full device lifecycle across laptops, desktops and mobile/MDM (provisioning, inventory, cleanup, decommissioning), enforcing security baselines and conditional access, and resolving complex device/OS/deployment issues
- Manage enterprise printing and workplace peripherals (secure/follow-me printing, driver deployment and configuration)
Application Packaging and Deployment
- Package, sequence and test enterprise applications (MSI, MSIX, App-V, Win32/IntuneWin, PSADT) for silent, unattended installation
- Deploy and maintain applications through Intune and SCCM/MECM, managing the catalogue (versioning, dependencies, detection rules, retirement)
- Automate packaging and deployment workflows with PowerShell
OS, Driver and Patch Management
- Design and maintain Windows OS deployment (imaging, SCCM/MECM task sequences, Autopilot / zero-touch provisioning)
- Manage the driver and firmware lifecycle and hardware model onboarding across the fleet
- Plan and run Windows migrations (e.g. Windows 11) and the patching/update strategy (Windows Update for Business, WSUS/SCCM)
Monitoring, Reporting and User Experience
- Monitor device health and the digital employee experience and report on compliance, software deployment and patch status.
Documentation, Standards and Projects
- Maintain packaging, configuration and architecture (EUC) documentation, and act as the Windows client subject-matter expert.
- Deliver workplace projects (OS migrations, Autopilot, modern workplace transformation, printing, MDM etc.) and drive continuous improvement with IT and business stakeholders.
Required profile:Minimum required criteria:
- Bachelor's degree in computer science / IT, or an equivalent combination of education and experience that satisfies the requirements of the position
- Proven experience as an End-User Computing / workplace engineer, with a strong specialisation in Microsoft Windows client environments
- Hands-on expertise in application packaging and software deployment (MSI, MSIX, App-V, Win32/IntuneWin, PSADT) and silent/unattended installations
- Hands-on experience with endpoint deployment technologies: Microsoft Intune and SCCM/MECM (packages, applications, task sequences)
- Hands-on experience with Windows OS deployment (imaging, task sequences,Autopilot) and driver/BIOS lifecycle management
- Solid scripting and automation skills (PowerShell)
- Good analytical skills with the ability to clearly explain and summarise ideas
- Good verbal and written communication skills in English
Desired or to be required criteria:
- Microsoft Intune / Endpoint Manager
- SCCM / MECM (co-management scenarios)
- Windows 10 / Windows 11 administration and migration
- Application packaging (MSI, MSIX, App-V, Win32/IntuneWin, PSADT)
- Windows Autopilot and zero-touch provisioning
- OS imaging, task sequences and driver management
- Entra ID and Active Directory (device-centric usage)
- Patch and update management (Windows Update for Business, WSUS)
- MDM concepts and security compliance
- Digital employee experience / monitoring tools (e.g. Nexthink)
- Relevant Microsoft certifications (e.g. MD-102 Endpoint Administrator)
- Scripting and automation
The ideal candidate:
- Autonomous, methodical and detail-oriented, with a strong drive for automation and standardisation
- Knowledge of Luxembourgish or any other language is considered an asset
