Professional, IT Operations

Job Title: Configuration Management Systems Engineer, Windows Endpoint Patching

Location:
Mexico Center of Excellence (COE)SummaryJLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The ideal candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.

Key Responsibilities
* Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third-party applications using Intune (primary), MCM, and PatchMyPC.
* Configure and manage Autopilot for device provisioning.
* Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).
* Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.
* Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.
* Act as a senior escalation point for complex endpoint issues, coordinating with internal support teams and external vendors to ensure timely resolution.
* Provide input into process improvements and the future direction of endpoint management technologies.
* Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.
* Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long-term strategies.
* Participate in a global, follow-the-sun support model to address critical system issues and perform scheduled maintenance.Required Qualifications* In-depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.
* Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user-driven provisioning and pre-provisioning) for device enrollment.
* Experience configuring and maintaining Autopilot using ESP, group tags, etc.
* Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM, Intune, and Windows log files, from both the tenant consoles and endpoint devices.
* Proficient in scripting with PowerShell to automate tasks and implement solutions.
* Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.
* Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.
* Demonstrated experience with patch testing and application testing methodologies.
* Experience with Microsoft Configuration Manager (MCM/SCCM).
* Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.
* Excellent technical, analytical, and problem-solving skills with the ability to manage multiple projects simultaneously in a fast-paced environment.
* Strong communication skills for effective collaboration with global teams.
* A reliable, self-motivated, and disciplined work ethic.Preferred Qualifications* Experience with application packaging and deployment techniques.
* Knowledge of and experience with Microsoft Graph API.
* Experience using AI Assistants to improve efficiency and simplify day-to-day tasks is preferred.
* Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.
* Experience with virtual desktop environments (e.g., AWS Workspaces).
* Previous experience communicating directly with Executive Leadership.
* Prior experience working within a global, distributed team structure.

Location:
On-site –Jalisco,MEX