Endpoint & Applications Engineer
About Ekco
🚀 Founded in 2016, Ekco has quickly become one of Europe’s fastest-growing cloud solution providers and your trusted security-first Managed Service Provider.
IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk – powered by local expertise, delivered at European scale.
We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments.
☁️ In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world.
🌍 Today, we’re a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia and we’re continuing to grow.
At Ekco, how we work matters as much as what we deliver. Our people live by four core values that shape everything we do:
On It: We take ownership, follow through, and get things done.
All In : We collaborate, support each other, and commit fully to shared goals.
Connected: We build trusted relationships with colleagues, clients, and partners.
Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.
🏠If these values resonate with you, you’ll feel right at home here.
The Role
The Endpoint & Applications Engineer is responsible for the configuration, validation and ongoing support of end‑user devices and application packages within a Microsoft Intune‑managed environment.
The role focuses on ensuring quality, consistent, secure laptop builds and the packaging, testing and lifecycle management of applications deployed via Intune and the Company Portal, supporting a high-quality end user experience across customer environments.
Day-to-day at Ekco:
Application Packaging & Company Portal Management
Package, test and maintain applications for deployment via Microsoft Intune.
Create and manage Win32 application packages, including install, uninstall and detection logic.
Maintain application availability, naming standards and user experience within the Company Portal.
Manage application updates, supersedence and retirement in line with security and support requirements.
Validate application behaviour during Autopilot builds and post‑deployment scenarios.
Troubleshoot and remediate application deployment failures.
Produce documentation on packages and troubleshooting guides.
Endpoint Configuration & Build Validation
Maintain and validate standard Windows laptop build configurations using Microsoft Intune and Windows Autopilot.
Ensure devices are correctly enrolled, configured and compliant with agreed build standards.
Support device rebuilds, refreshes and reassignments in line with asset and configuration processes.
Validate build outcomes to ensure devices are ready for end‑user consumption.
Maintain clear and accurate build and configuration documentation.
Configuration, Compliance & Standards
Create and maintain Intune configuration profiles, deployment profiles and compliance policies.
Support endpoint security baselines and Conditional Access configurations in collaboration with Security teams.
Monitor device compliance and assist with remediation of configuration issues.
Ensure endpoint standards are consistently applied across customer environments.
Operational Support
Provide support for endpoint configuration and application deployment related incidents, collaborating with third line where appropriate.
Act as an escalation point for Service Desk teams for build and packaging issues.
Assist with onboarding and offboarding activities relating to device provisioning and recovery.
Continuous Improvement
Identify opportunities to improve build consistency, application deployment reliability and automation.
Contribute to the ongoing improvement of endpoint lifecycle management processes.
Keep up to date with Microsoft Intune, Windows and endpoint management best practices.
Skills & Experience:
Essential
A focus on quality and customer experience at all times.
Strong experience with Microsoft Intune (Endpoint Manager).
Proven experience packaging and deploying applications via Intune.
Good understanding of Win32 application deployment and Company Portal behaviour.
Experience working with Windows 10/11 in managed environments.
Familiarity with Autopilot and device enrolment processes.
Strong troubleshooting, documentation and attention to detail.
Experience working within an MSP or multi‑customer environment.
Desirable
Understanding of ITIL‑aligned service delivery environments.
PowerShell scripting for application packaging or automation.
Experience supporting endpoint security tooling and policies.
Exposure to mobile device management (Android and/or iOS) via Intune.
Benefits / Perks
• ☀️ Time Off: 25 days annual leave + public holidays
• 🎂 Birthday Leave: One extra day off to celebrate
• 💰 Company Pension Scheme
• 📞 Employee Assistance Programme (EAP) for wellbeing support
• 🏃♀️ EkcOlympics: Global team activity challenges
• 📚 Unlimited access to Pluralsight for continuous development
• 🌱 Real opportunities to grow, including international progression
Why Ekco
• ⭐️ Microsoft’s 2023 Rising Star Security Partner of the Year
• 🚀 First Irish Microsoft MSP to achieve all four Microsoft Security Specializations
• 🏅 Ranked 4th fastest-growing technology company in the Deloitte Fast50 Awards
• 🌈 A culture rooted in diversity, equality, inclusion & belonging
• 🎉 A commitment to internal mobility and career progression
• ✨ Flexible, family-friendly working at the heart of our culture
• 🔐 Proud to be your trusted security-first Managed Service Provider chosen by IT leaders to drive operational efficiency, scale smarter and stay ahead of risk.
- Department
- Service Delivery
- Locations
- Chancery Lane - London, Ekco UK - Milton Keynes
- Remote status
- Hybrid