Senior Endpoint Deployment Specialist

🏗 We're Hiring: Senior Endpoint Deployment Specialist📍

Location:
United Arab Emirates (Remote) 🕒 Employment Type: Full-Time 💼 Experience Level: Mid-Level to Senior 🌐 Work Arrangement: Fully Remote

About Us
We are a construction-focused organization committed to delivering complex projects through operational excellence, secure technology infrastructure, disciplined project management, and collaborative project delivery. Our multidisciplinary teams span Project Management, Construction, Engineering, Procurement, Commercial, Legal, Finance, Human Resources, Design, Quality, HSE, Consultants, Contractors, Suppliers, Logistics, Administration, Information Technology, and Executive Leadership. Our distributed workforce depends on reliable, secure, and consistently configured endpoint devices to access project systems, engineering applications, corporate communications, financial platforms, and business-critical information. We are committed to providing standardized technology environments that improve productivity, protect organizational data, and support seamless collaboration across corporate offices, remote employees, construction sites, and project locations. The RoleWe are seeking an experienced Senior Endpoint Deployment Specialist to plan, coordinate, execute, and optimize enterprise endpoint deployment activities across the organization. The successful candidate will have strong expertise in endpoint provisioning, operating system deployment, device imaging, configuration management, application packaging, endpoint security, device enrollment, and deployment automation. This role will be responsible for delivering standardized and secure endpoint environments for laptops, desktops, mobile devices, and other supported corporate equipment. The specialist will manage deployment processes from device preparation and configuration through testing, user handover, lifecycle tracking, and post-deployment support. Working closely with IT Infrastructure, Endpoint Management, Cybersecurity, Network Operations, Service Desk, Procurement, Human Resources, and business stakeholders, the Senior Endpoint Deployment Specialist will ensure that devices are deployed efficiently, comply with organizational standards, and meet the operational needs of project managers, engineers, site personnel, consultants, and corporate teams.

Key Responsibilities
1. Enterprise Endpoint Deployment
• Plan, coordinate, and execute endpoint deployment activities across corporate offices, remote teams, and construction project environments.
• Deploy and configure laptops, desktops, workstations, and other approved endpoint devices according to organizational standards.
• Prepare devices for new employees, replacement cycles, departmental transfers, project mobilization, and technology refresh initiatives.
• Establish standardized deployment procedures covering device preparation, operating system installation, configuration, application installation, testing, and handover.
• Coordinate deployment schedules with IT teams, department managers, Human Resources, Procurement, and project stakeholders.
• Ensure deployed devices meet approved hardware specifications, software requirements, security baselines, and user access needs.
• Manage bulk device deployments while maintaining consistent quality, accurate asset records, and minimal disruption to business operations.
• Support endpoint deployment for engineering teams, project management personnel, commercial departments, finance teams, and site-based employees.
• Coordinate device delivery and readiness for remote employees and geographically distributed project teams.
• Maintain detailed deployment records, device assignment information, configuration details, and user acceptance documentation. 2. Operating System Deployment and Imaging
• Design, maintain, and optimize operating system deployment processes for supported Windows endpoint environments.
• Develop and maintain standardized operating system images, deployment task sequences, provisioning profiles, and configuration packages.
• Manage Windows installation, driver integration, operating system updates, and baseline configuration activities.
• Support deployment technologies such as Microsoft Configuration Manager, Windows Deployment Services, Windows Autopilot, and Microsoft Intune, as applicable to the environment.
• Validate operating system images before release to ensure compatibility, stability, security, and compliance with approved standards.
• Maintain separate deployment configurations where required for different device models, user groups, business functions, and application requirements.
• Troubleshoot imaging failures, installation errors, driver conflicts, boot issues, and provisioning problems.
• Support operating system upgrades, feature updates, and migration projects across the endpoint estate.
• Ensure deployment images and packages are updated regularly and do not contain unnecessary applications, outdated components, or insecure configurations.
• Maintain version control, testing records, release documentation, and rollback procedures for deployment images and task sequences. 3. Microsoft Intune and Endpoint Management
• Administer and support Microsoft Intune and related endpoint management capabilities for device enrollment, configuration, compliance, and application deployment.
• Configure device enrollment methods, provisioning profiles, configuration policies, compliance policies, and endpoint management assignments.
• Support Windows Autopilot deployment profiles and automated provisioning workflows.
• Integrate endpoint deployment processes with Microsoft Entra ID and applicable identity and access management controls.
• Troubleshoot enrollment failures, device registration issues, policy conflicts, synchronization problems, and compliance reporting discrepancies.
• Manage endpoint configuration profiles for security settings, device restrictions, Wi-Fi, certificates, and other approved corporate requirements.
• Support co-management or migration scenarios involving Microsoft Configuration Manager and cloud-based endpoint management.
• Monitor device deployment status and investigate failed, incomplete, or noncompliant configurations.
• Maintain accurate records of managed devices, enrollment status, deployment assignments, and policy application.
• Recommend improvements that simplify device provisioning and strengthen centralized endpoint management. 4. Application Packaging and Deployment
• Package, test, deploy, and maintain enterprise applications required by employees and project teams.
• Support deployment of Microsoft 365 applications, collaboration tools, engineering software, project management platforms, security agents, and approved business applications.
• Create and maintain application installation packages, deployment scripts, detection rules, dependencies, and installation parameters.
• Use appropriate deployment tools, including Microsoft Intune, Configuration Manager, and supported third-party packaging technologies.
• Validate application compatibility with approved operating system versions, hardware specifications, and endpoint security configurations.
• Troubleshoot application installation failures, dependency conflicts, licensing issues, and deployment errors.
• Coordinate with application owners, software vendors, and business stakeholders to confirm application requirements and deployment readiness.
• Maintain application inventories, package versions, installation instructions, and deployment documentation.
• Implement controlled application update and removal processes to maintain consistent endpoint configurations.
• Ensure application packages are obtained from approved sources and validated according to organizational security requirements. 5. Endpoint Security and Compliance
• Ensure deployed endpoints meet approved cybersecurity policies, configuration standards, and device compliance requirements.
• Coordinate with Cybersecurity teams to implement endpoint protection, antivirus, endpoint detection and response, host firewall, and other security controls.
• Support deployment of Microsoft Defender for Endpoint or equivalent endpoint security platforms where applicable.
• Configure and validate disk encryption, secure boot, operating system hardening, local administrator restrictions, and other required security settings.
• Ensure devices receive appropriate security updates, endpoint protection policies, and approved configuration baselines.
• Support integration with Microsoft Entra ID Conditional Access and other access controls that depend on device compliance.
• Identify deployment configurations that introduce security risks, including excessive local privileges, unsupported software, and missing security agents.
• Investigate devices that fail compliance checks and coordinate remediation before granting or restoring access where required by policy.
• Support endpoint vulnerability remediation through approved operating system, driver, application, and configuration updates.
• Maintain deployment evidence demonstrating compliance with applicable organizational security requirements. 6. Device Enrollment, Provisioning, and Configuration
• Establish repeatable provisioning workflows for corporate-owned endpoints and supported personally owned devices where permitted.
• Configure device naming conventions, organizational assignments, device categories, enrollment restrictions, and ownership attributes.
• Apply appropriate configuration settings for different departments, job functions, project locations, and operational requirements.
• Support identity-based device registration, domain joining, Microsoft Entra joining, and hybrid joining where applicable.