Endpoint Management Engineer (L2) – Intune & SCCM/MECM

About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. Position summary: We are looking for a skilled L2 System Administrator to support enterprise client platforms and endpoint management services. The role is responsible for endpoint administration, incident resolution, OS and application patching, software deployment, device compliance, troubleshooting and lifecycle management. The administrator will work closely with L1 support, L3 SMEs, Service Desk, Security and infrastructure teams to maintain endpoint availability and SLA compliance across global operations. Key Responsibilities: Endpoint & Device Management Provide L2 support for Windows endpoint incidents, device issues and service requests. Administer and troubleshoot endpoint management platforms such as Microsoft Intune and SCCM/MECM. Support device enrollment, configuration profiles, compliance policies and endpoint provisioning. Troubleshoot device registration, policy synchronization, application deployment and management issues. Support Windows Autopilot enrollment, device provisioning and lifecycle activities. OS Patching & Application Management Execute approved Windows OS and application patching activities. Monitor patch compliance, investigate deployment failures and perform post-patching validation. Support application packaging, deployment, installation and troubleshooting. Manage software distribution, deployment collections and endpoint configuration baselines. Coordinate driver, firmware and feature update deployments as per approved procedures. Endpoint Configuration & Compliance Monitor endpoint compliance against approved OS patching, encryption and configuration baselines. Support BitLocker encryption, device configuration policies and security baseline remediation. Investigate compliance failures, configuration deviations and policy application issues. Coordinate with the dedicated Defender/Security team for endpoint security-related incidents and remediation. Support device access controls and remediation of non-compliant endpoints. Operations & Service Management Resolve endpoint incidents and service requests within defined SLAs. Follow ITIL Incident, Problem, Change and Request Management processes. Troubleshoot complex endpoint issues and escalate platform-level problems to L3 SMEs. Maintain runbooks, operational documentation, incident records and shift handover notes. Coordinate with L1, Service Desk, Identity, Security, Network and Application teams.