As a Modern Workplace Endpoint Engineer , you will help design, build, and operate enterprise endpoint-management and device-migration capabilities for a complex international separation programme — working hands-on with MECM, Windows 11 imaging and OS deployment, application packaging, patch management, device staging, and IT Corner services.

Collaborating across countries with infrastructure, network, identity, security, and service-management teams, you'll support pilots and migration waves while ensuring endpoint security, asset accuracy, operational readiness, and uninterrupted service for end users.

Join our Workplace Engineering Practice team of top Modern Workplace Consultants, driving customer adoption through technical leadership on strategic, complex consulting projects. We deliver innovative, customized solutions powered by the Microsoft Cloud across the entire customer digital journey — giving you the chance to contribute to life-changing innovations that impact billions of people worldwide.

What you’ll do:

- Design, build and validate Microsoft Configuration Manager (MECM) environments, including SQL databases, site system roles, boundaries, discovery, Distribution Points, Management Points, PXE, certificates and role-based administration.
- Create and maintain Windows 11 light images and MECM Operating System Deployment task sequences, integrating drivers, corporate applications, endpoint security agents, encryption, browser and Microsoft Office hardening, and AppLocker controls.
- Review application inventories and import, adapt or repackage country-specific applications using agreed packaging standards and repositories, validating content distribution and hardware compatibility.
- Prepare and validate IT Corner and device-staging capabilities, including technical workstations, secure storage, imaging connectivity, NAC exceptions and end-to-end integration with DNS, DHCP, Active Directory, PKI, KMS, network and security services.




- Plan and execute country pilots and controlled migration waves, including device assessment, user appointments, preparation and handover, Swap-and-Remaster rotation, first-login checks, hypercare and management of engineering, departmental, loan and hardware-refresh exceptions.
- Operate and troubleshoot endpoints and MECM services, supporting patching through WSUS and Patch My PC, client health, application deployment, device diagnostics, remastering, warranty coordination, stock and loan-device management.
- Maintain accurate asset, peripheral and ownership records in source and target CMDBs; reconcile migrated, returned, wiped, reimaged, retired and in-stock devices throughout the programme.
- Produce architecture, detailed design, deployment, installation, test, operational, disaster recovery, training and handover documentation, and collect evidence against agreed acceptance criteria.
- Coordinate delivery across multiple countries and work effectively with Client Management, End User Support, Network, Hosting, IAM, Security, Service Desk and local site teams, while protecting business and service continuity.

Job Qualifications

- 5+ years of hands-on experience designing, implementing and supporting Microsoft Configuration Manager environments and Windows endpoint deployment solutions in complex enterprise organisations.
- Strong knowledge of MECM architecture and administration, including SQL, site roles, boundaries, discovery, collections, RBAC, Distribution Points, Management Points, PXE, reporting, certificates and client-health monitoring.
- Advanced experience with Windows 11 imaging,



Operating System Deployment, task sequences, driver management, application packaging and distribution, preferably including enterprise packaging repositories or tools comparable to Instlib.
- Practical experience with enterprise patch management using WSUS and preferably Patch My PC, including synchronisation, deployment rings, compliance reporting and maintenance activities.
- Working knowledge of Active Directory, DNS, DHCP, PKI, KMS, network and firewall dependencies, NAC, endpoint encryption and security controls such as AppLocker, browser and Office hardening, antivirus exclusions and endpoint security agents.
- Experience planning and delivering high-volume, multi-site endpoint migrations, pilots and waves, including device staging, Swap-and-Remaster processes, user appointment coordination, hypercare and operational handover.
- Experience providing L2/L3 endpoint support and working with IT Corner or field-support models, including device provisioning, replacement, diagnostics, remastering, repairs, warranty handling, stock and peripheral management.
- Experience with ITSM and CMDB processes, including incident, request, change and problem management, asset reconciliation, inventory accuracy, audit evidence and SLA-driven delivery.
- Ability to create and maintain technical and operational documentation, test plans, test evidence, deployment runbooks, user guidance, training materials, disaster recovery procedures and service-operation documentation.
- Strong analytical, troubleshooting, stakeholder-management and communication skills, with the ability to work across countries and coordinate dependencies with infrastructure, identity, network and security teams.
- Microsoft endpoint-management certifications such as MD-102 are desirable; equivalent demonstrable Microsoft Configuration Manager and Windows deployment expertise will also be considered.
- English - advanced

📌 Modern Workplace Endpoint Engineer (Madrid & Sevilla)
🏢 Avanade
📍 Madrid