Configuration Management Systems Engineer, Windows Endpoint Patching

April 2026

Job Title: Configuration Management Systems Engineer, Windows Endpoint Patching

Location: Mexico Center of Excellence (COE)

Summary

JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The ideal candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.

Key Responsibilities

• Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third‑party applications using Intune (primary), MCM, and PatchMyPC.
• Configure and manage Autopilot for device provisioning.
• Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).
• Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.
• Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.
• Act as a senior escalation point for complex endpoint issues, coordinating with internal support teams and external vendors to ensure timely resolution.
• Provide input into process improvements and the future direction of endpoint management technologies.
• Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.
• Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long‑term strategies.
• Participate in a global, follow‑the‑sun support model to address critical system issues and perform scheduled maintenance.

Required Qualifications

• In‑depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.
• Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user‑driven provisioning and pre‑provisioning) for device enrollment.
• Experience configuring and maintaining Autopilot using ESP, group tags, etc.
• Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM, Intune, and Windows log files, from both the tenant consoles and endpoint devices.
• Proficient in scripting with PowerShell to automate tasks and implement solutions.
• Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.
• Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.
• Demonstrated experience with patch testing and application testing methodologies.
• Experience with Microsoft Configuration Manager (MCM/SCCM).
• Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.
• Excellent technical, analytical, and problem‑solving skills with the ability to manage multiple projects simultaneously in a fast‑paced environment.
• Strong communication skills for effective collaboration with global teams.
• A reliable, self‑motivated, and disciplined work ethic.

Preferred Qualifications

• Experience with application packaging and deployment techniques.
• Knowledge of and experience with Microsoft Graph API.
• Experience using AI Assistants to improve efficiency and simplify day‑to‑day tasks is preferred.
• Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.
• Experience with virtual desktop environments (e.g., AWS Workspaces).
• Previous experience communicating directly with Executive Leadership.
• Prior experience working within a global, distributed team structure.