Workspace Security Engineer (AVP/VP)

About the role

You will engineer Microsoft endpoint and modern workplace security policies, configurations and technical controls. You will configure and improve security across Microsoft Intune, Microsoft 365, Entra ID, Conditional Access, device compliance and endpoint management. You will translate security requirements and control gaps into practical policy designs and engineering solutions. You will also use PowerShell, Microsoft Graph APIs and automation to improve configuration management, validation and reporting, and investigate complex endpoint security issues.

Requirements

• About 8 or more years of relevant experience in EUC, endpoint engineering, modern workplace, infrastructure or cybersecurity
• Hands-on experience with Microsoft Intune, Microsoft 365, Entra ID or Azure AD, Active Directory, Group Policy, device compliance and Conditional Access
• Experience designing, configuring, testing or modernising endpoint policies, including GPO-to-Intune migration
• Understanding of endpoint security baselines, identity-driven access, vulnerability remediation, patching and secure configuration management
• Experience with PowerShell, Microsoft Graph APIs, scripting, workflow automation or configuration-as-code
• Strong troubleshooting, analytical, documentation, communication and stakeholder-management skills