End User Computing Engineer - Microsoft Intune

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

Role Description

We are looking for a Windows End User Computing Engineer who has extensive knowledge of the Microsoft ecosystem, including both on-premises and cloud services. Responsibilities include engineering and operating Windows Workstations, automating tasks, and patch and vulnerability management. Applicants should be familiar with managing and optimizing Microsoft Intune and SCCM, ensuring seamless deployment and management of mobile devices, applications, and security policies.


Role Objectives

This role requires comprehensive expertise in the Microsoft ecosystem, encompassing both on-premises and cloud services. Key responsibilities include:

- Management of Hybrid-Joined and EntraID joined Windows Workstation endpoints, including build processes, security patching, and vulnerability management.
- Advanced knowledge of M365 suite and O365 services.
- Configure and maintain Microsoft Intune policies for mobile device management (MDM) and mobile application management (MAM).
- Experience with co-management (Intune + SCCM / MECM) as part of modern device management transformation
- Experience with Windows Autopilot as a modern OS deployment solution with strong understanding of the mechanics and processes for developing end to end provisioning processes through MS Intune including images, software deployment, and patching.
- Experience managing SCCM.
- Collaborate with IT and security teams to implement and enforce device security policies and compliance standards.
- Proficiency with automation via PowerShell or equivalent software development skills and experience using source code tools to store code, scripts, and configurations (e.g., Git, GitHub, etc.)
- Manage the deployment of applications, updates, and configurations to end-user devices using Microsoft SCCM and Intune.
- Troubleshoot and resolve issues related to Intune and SCCM deployments, ensuring a smooth user experience.
- Stay informed about Intune updates and new features, providing recommendations for their implementation.
- Collaborate with other IT administrators to integrate Microsoft Intune with other systems and tools.
- Monitor and report on the health and performance of the Intune environment.
- Provide level 3 troubleshooting.

Qualifications and Skills

5+ years of experience in an infrastructure/end-user support role.
- Proven experience as a Microsoft Intune Administrator or similar role.
- In-depth knowledge of Microsoft Intune features, policies, and best practices.
- Familiarity with mobile device platforms, including iOS and Android.
- Experience with SCCM
- Experience with JAMF and Mac Device Management.
- Strong understanding of cybersecurity principles and best practices.
- Ability to troubleshoot and resolve technical issues independently.
- Microsoft Workstation patch and vulnerability management and troubleshooting.
- Participate in on-call rotation coverage and 3rd level support for Windows Platform infrastructure.
- Ability to document processes, requirements, and create test plans.
- Excellent communication and collaboration skills.

Nice To Have
• Tanium
• LogicMonitor
• ServiceNow experience
• Infrastructure as code experience (Ansible, Terraform)
• DevOps/GitHub experience
• SuccessFactors

Additional Requirements

SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at View email address on click.appcast.io.