Endpoint Engineer

Fitch Group is currently seeking an Endpoint Engineer based out of our London office. As a leading global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets.

The Endpoint Engineering team serves as a strategic function within the global infrastructure organization, leading the design, governance, and optimization of all enterprise endpoint platforms—including Windows, macOS, mobile, and virtual devices. The team delivers advanced engineering and management capabilities that ensure secure, reliable, and frictionless user experiences through modern device management, automation, observability, and Zero Trust principles.

How You’ll Make An Impact

• Deliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination.
• Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives.
• Package, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements.
• Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement.
• Maintain, optimize, and monitor Microsoft Endpoint Manager (Intune + MECM) to ensure strong posture management, compliance, app control, and secure configuration baselines.
• Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.
• Create and maintain technical documentation, runbooks, and cross-team knowledge resources.
• Engage in cross-functional project work spanning endpoint modernization, cloud identity, automation, security hardening, and software lifecycle management.
• Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations.
• Act as an owner by proactively driving issues to resolution across business teams and external vendors.

You May Be a Good Fit If

• 3 to 5+ years in enterprise endpoint engineering or advanced support with hands-on experience in: Microsoft Intune (Endpoint Manager), MECM, and co-management services.
• Active Directory, Directory Services including Group Policy, and RSAT tools.
• Intune configuration and Intune compliance.
• LAPS, and least privilege model, elevation of service (Privilege Management).
• Networking fundamentals (DNS, DHCP, VPN, Proxy).
• Strong experience with modern Intune management, including: Zero-touch provisioning and cloud-first imaging strategies.
• Intune application management (Win32, MSI, MSIX, store apps, managed apps).
• Settings Catalog, Compliance Policies, Configuration Profiles.
• Device Filters, Dynamic Groups, and scalable targeting strategies.
• Endpoint Analytics, and digital experience monitoring (DEX).
• Proficiency with Windows PowerShell, including: Running, creating and editing PowerShell scripts.
• Managing system processes and services using PS.
• Understanding basic command syntax and parameters.
• iOS/iPadOS, Android Enterprise, and macOS management.
• Enrollment profiles, app protection policies, and managed device compliance.
• Experience supporting Zero Trust, conditional access, and identity-based access controls.
• Ability to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks.
• Demonstrated ownership mindset, seeking to eliminate root causes and improve user experience.

What Would Make You Stand Out

• Creating and modifying deployment scripts using PSADT.
• Packaging and deploying applications with PSADT.
• Customizing user prompts and installation messages.
• Troubleshooting and logging application deployments.
• Understanding PSADT command-line options and functions.
• Managing application detection and remediation logic.
• Advanced MECM collection design and query creation.
• Experience with Windows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed).
• Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN).
• Experience with third-party patching platforms (e.g., Patch My PC).
• Proficiency with the PowerShell App Deployment Toolkit (PSADT).
• Strong PowerShell automation expertise and familiarity with Git-based workflows.
• Experience with vulnerability management tools and endpoint telemetry/observability platforms.
• Microsoft certifications related to Endpoint, Azure, or Security.

Why Choose Fitch

• Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location.
• A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity.
• Investing in Your Future: Retirement planning and tuition reimbursement programs that empower you to achieve your short and long-term goals.
• Promoting Health & Wellbeing: Comprehensive healthcare offerings that enable physical, mental, financial, social, and occupational wellbeing.
• Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance career and family life effectively.
• Inclusive Work Environment: A collaborative workplace where all voices are valued, with Employee Resource Groups that unite and empower our colleagues around the globe.
• Dedication to Giving Back: Paid volunteer days, matched funding for donations and ample opportunities to volunteer in your community.

Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest.