Endpoint Management Engineer (L2) – Intune & SCCM/MECM

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

We are looking for a skilled L2 System Administrator to support enterprise client platforms and endpoint management services. The role is responsible for endpoint administration, incident resolution, OS and application patching, software deployment, device compliance, troubleshooting and lifecycle management. The administrator will work closely with L1 support, L3 SMEs, Service Desk, Security and infrastructure teams to maintain endpoint availability and SLA compliance across global operations.

Key Responsibilities:

Endpoint & Device Management

• Provide L2 support for Windows endpoint incidents, device issues and service requests.
• Administer and troubleshoot endpoint management platforms such as Microsoft Intune and SCCM/MECM.
• Support device enrollment, configuration profiles, compliance policies and endpoint provisioning.
• Troubleshoot device registration, policy synchronization, application deployment and management issues.
• Support Windows Autopilot enrollment, device provisioning and lifecycle activities.

OS Patching & Application Management

• Execute approved Windows OS and application patching activities.
• Monitor patch compliance, investigate deployment failures and perform post-patching validation.
• Support application packaging, deployment, installation and troubleshooting.
• Manage software distribution, deployment collections and endpoint configuration baselines.
• Coordinate driver, firmware and feature update deployments as per approved procedures.

Endpoint Configuration & Compliance

• Monitor endpoint compliance against approved OS patching, encryption and configuration baselines.
• Support BitLocker encryption, device configuration policies and security baseline remediation.
• Investigate compliance failures, configuration deviations and policy application issues.
• Coordinate with the dedicated Defender/Security team for endpoint security-related incidents and remediation.
• Support device access controls and remediation of non-compliant endpoints.

Operations & Service Management

• Resolve endpoint incidents and service requests within defined SLAs.
• Follow ITIL Incident, Problem, Change and Request Management processes.
• Troubleshoot complex endpoint issues and escalate platform-level problems to L3 SMEs.
• Maintain runbooks, operational documentation, incident records and shift handover notes.
• Coordinate with L1, Service Desk, Identity, Security, Network and Application teams.
• Support endpoint lifecycle management, operational reporting and continuous improvement.
• Ensure effective APAC–EMEA–NLAM follow-the-sun handovers.

Required Skills & Qualifications:

• 3–6 years of experience in enterprise endpoint management, Windows client administration, device management and production IT operations.
• Hands-on experience in Windows endpoint administration and troubleshooting.
• Practical experience with Microsoft Intune and/or SCCM/MECM.
• Knowledge of Windows OS deployment, patching, software distribution and device compliance.
• Understanding of device enrollment, configuration profiles, Group Policy and endpoint policies.
• Experience troubleshooting application installation, policy synchronization and endpoint connectivity.
• Knowledge of BitLocker, encryption policies and endpoint configuration baselines.
• Understanding of ITIL processes, incident management and SLA-driven operations.
• Experience with ServiceNow or equivalent ITSM platforms.
• Basic PowerShell scripting skills for endpoint troubleshooting and administration.
• Experience in enterprise production support and global operational environments.

Preferred Skills & Qualifications:

• Microsoft MD-102 or equivalent endpoint management certification.
• Experience with Windows Autopilot and Intune/SCCM co-management.
• Knowledge of application packaging, driver and firmware deployment.
• Exposure to Microsoft Entra ID, conditional access and identity integration.
• Experience with endpoint analytics, compliance reporting and automation.
• Familiarity with enterprise monitoring and endpoint management tools.

Key Competencies

Endpoint Administration | Microsoft Intune | SCCM/MECM | Windows OS Management | Autopilot | Patch Management | Software Deployment | Device Configuration & Compliance | BitLocker | PowerShell | Incident Resolution | ITIL Operations | Escalation Management | Global 24x7 Operations

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.