Windows Endpoint Engineer

About the role

Marsh is looking for a Windows Endpoint Engineer based in Mexico City. This is a hybrid role with at least three days a week in the office. The engineer works across device management, Windows deployment and servicing, application delivery, endpoint security and compliance, hardware lifecycle, automation and digital employee experience, collaborating with security, identity, network, application, service management and regional support teams.

Key responsibilities

• Engineer and maintain the enterprise Windows endpoint platform, including laptops, desktops, virtual endpoints and specialist devices.
• Design and support provisioning and lifecycle workflows with Microsoft Intune, Entra ID and Windows Autopilot, including Entra-only scenarios.
• Manage Windows configuration, updates, servicing rings, drivers, BIOS, firmware and UEFI standards.
• Improve application packaging, deployment, update and remediation processes with application owners.
• Maintain endpoint security and compliance, including BitLocker, Secure Boot, Defender controls, Windows Hello for Business and security baselines.
• Use PowerShell, Microsoft Graph and automation to reduce manual effort and integrate with platforms such as ServiceNow.
• Analyse telemetry and digital employee experience data to improve device health and performance.
• Lead tier III incident investigations and root-cause analysis, involving Microsoft and other vendors.
• Turn business and security needs into technical designs, plans and acceptance criteria.
• Create roadmaps, standards, engineering guides, release documentation and support knowledge.

Required profile

• 5+ years of experience in Windows endpoint support.
• Strong experience engineering and supporting Windows 11 endpoints in a large, distributed enterprise.
• Hands-on experience with Intune, Entra ID, Windows Autopilot and cloud-based Windows configuration and compliance.
• Experience with Windows deployment, servicing, recovery and troubleshooting, including updates, drivers and firmware.
• Knowledge of application deployment, update management and compatibility troubleshooting for Microsoft 365 Apps and enterprise Windows apps.
• Good understanding of endpoint security, identity, compliance and access controls.
• Ability to solve complex problems, communicate with technical and non-technical stakeholders and write clear engineering documentation.

Required skills

• Microsoft Intune, Entra ID, Windows Autopilot
• PowerShell and API automation (JSON, XML, CSV)
• Microsoft Graph
• Windows deployment, servicing and troubleshooting