Endpoint Security Engineer (UEM)

Salary: ₱50,000 – ₱70,000 per month

Job Description

Endpoint Management and Administration

• Manage and administer Unified Endpoint Management (UEM) platforms across Windows, macOS, iOS/iPadOS, and Android.

• Configure, implement, and maintain endpoint policies, security baselines, device restrictions, and compliance standards.

• Manage device enrollment, provisioning, configuration, monitoring, reassignment, and decommissioning.

• Administer Microsoft Intune, Windows Group Policy, Microsoft Entra ID, and other endpoint management technologies.

• Maintain standardized endpoint configurations and security policies based on IT and Information Security standards.

• Manage user-based and device-based policy assignments.

• Monitor endpoint compliance, health, connectivity, and policy deployment.

• Troubleshoot device enrollment, policy deployment, configuration, and connectivity issues.

• Review and optimize endpoint policies to prevent configuration conflicts and improve efficiency.

Endpoint Application Management

• Package, configure, test, and deploy applications using endpoint management platforms.

• Manage application assignments, deployment requirements, dependencies, detection rules, and uninstall configurations.

• Maintain application deployment standards for Windows and mobile devices.

• Troubleshoot application installation and deployment issues.

• Coordinate application packaging and deployment with application owners and vendors.

• Manage software updates and removal of outdated applications.

Endpoint Monitoring and Remote Management

• Monitor endpoint health, availability, security, and performance.

• Administer remote monitoring and management tools such as Kaseya, Microsoft Intune, and other RMM/UEM platforms.

• Configure monitoring policies, alerts, automation procedures, and endpoint actions.

• Perform remote troubleshooting and resolve endpoint issues.

• Develop automation scripts for repetitive endpoint administration tasks.

• Analyze endpoint monitoring data to identify recurring issues.

• Support the complete device lifecycle, from enrollment and provisioning to retirement and decommissioning.

Endpoint Security and Compliance

• Configure endpoint security policies in coordination with the Information Security team.

• Manage Microsoft Defender, BitLocker, Windows Firewall, Antivirus/EDR, Attack Surface Reduction, and device control policies.

• Implement endpoint security baselines and Conditional Access requirements.

• Monitor endpoint compliance with organizational security standards.

• Assist in resolving non-compliant or unsecured devices.

• Support security investigations by providing endpoint configuration and management information.

Identity and Access Management

• Integrate endpoint management platforms with Microsoft Entra ID, Active Directory, and Microsoft 365.

• Manage device registration and identity configurations.

• Support Conditional Access and device compliance integration.

• Configure group-based assignments and administrative scopes.

• Maintain identity and user access matrices to support authorization requirements.

Endpoint Automation

• Develop and maintain automation scripts using PowerShell and other scripting technologies.

• Automate endpoint configuration, software installation, remediation, and troubleshooting.

• Create reusable scripts and deployment packages.

• Integrate UEM platforms with APIs and other IT management systems when required.

Documentation and Standardization

• Prepare and maintain technical documentation, standard operating procedures (SOPs), and deployment guides.

• Document endpoint policies, application packages, scripts, and deployment processes.

• Maintain endpoint management configuration records.

• Prepare reports on endpoint compliance, enrollment, deployment, and management status.

• Establish and maintain standardized endpoint configuration baselines.

Incident, Problem, and Change Management

• Provide Level 2 and Level 3 technical support for endpoint management issues.

• Investigate recurring incidents and perform root cause analysis.

• Implement permanent solutions to recurring endpoint problems.

• Follow ITIL-based incident, problem, request, and change management processes.

• Conduct testing and validation before implementing changes in production environments.

Job Qualifications – Endpoint Management Engineer (Microsoft Intune)

• Bachelor's degree in Information Technology, Computer Science, Computer Engineering, or a related field.

• At least 3–5 years of experience in IT Infrastructure, Endpoint Management, or System Administration.

• Hands-on experience with Microsoft Intune, Unified Endpoint Management (UEM), and Microsoft Entra ID.

• Knowledge of Windows, macOS, iOS, and Android device management, configuration, and troubleshooting.

• Experience in endpoint security, device compliance, application deployment, and security policies.

• Familiarity with Active Directory, Microsoft 365, Group Policy, and Conditional Access.

• Experience with PowerShell scripting, automation, and remote management tools such as Kaseya.

• Knowledge of Microsoft Defender, BitLocker, Windows Firewall, and endpoint security solutions.

• Experience providing Level 2/Level 3 technical support, incident management, and troubleshooting.

• Strong analytical, problem-solving, documentation, and communication skills.