How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Endpoint Engineer
Endpoint Engineer – London Office
Fitch Group
About Fitch Group
Fitch Group operates as a leading global provider of credit and risk insights, delivering critical financial data, tools, and analytics. With 100+ years of experience and a global presence across 30+ countries, Fitch maintains a culture of credibility, independence, and transparency. The organisation includes world-class divisions such as Fitch Ratings (a top-N credit ratings agency) and Fitch Solutions (specialising in insights, data, and analytics). Headquartered in London and New York, Fitch is owned by Hearst.
About the Technology & Data Team
Fitch’s Technology & Data team blends innovation with real-world impact, featuring senior leadership roles such as Chief Data & Software Office and Chief Technology Office. Specialising in AI, cloud computing, and enterprise solutions, the team attracts diverse professionals eager to drive transformational projects. Recognised for excellence, Fitch has been named a „Best Place to Work in Technology” by Built In for three consecutive years.
Visit Fitch Technology Careers to explore opportunities.
About the Endpoint Engineering Team
The Endpoint Engineering team plays a strategic role in Fitch’s global infrastructure, overseeing the design, governance, and optimisation of all enterprise endpoints—including Windows, macOS, mobile, and virtual devices. The team ensures secure, reliable, and user-centric experiences through:
- Modern device management
- Automation and observability
- Zero Trust security principles
Key Responsibilities
- Incident Resolution: Address advanced technical issues with a focus on root-cause elimination and end-user experience.
- Policy & Compliance: Collaborate with leadership to define, implement, and operationalise endpoint policies in alignment with global infrastructure goals.
- Application Deployment: Package, test, and deploy enterprise applications using MECM (Microsoft Endpoint Configuration Manager) and Intune, ensuring compliance with internal and regulatory standards.
- Service Desk Integration: Work closely with the Service Desk team to reduce recurring incidents through automation, policy enhancements, and workflow streamlining.
- Endpoint Management: Maintain and optimise Microsoft Endpoint Manager (MECM + Intune) for:
- Secure posture management
- Compliance reporting
- Application control
- Configuration baselines
- Operational Maintenance: Execute day-to-day tasks, including:
- Patching & vulnerability remediation
- Compliance audits
- Endpoint health monitoring
- Technical Documentation: Create and maintain runbooks, wikis, and shared knowledge assets for cross-team access.
- Cross-functional Collaboration: Engage in endpoint modernization initiatives, cloud identity projects, automation, security hardening, and software lifecycle management.
- On-Call Support: Participate in an on-call rotation to resolve urgent after-hours incidents/core escalations.
- Issue Ownership: Proactively drive fault resolution across business teams and external vendors.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Qualifications
3–5+ years of enterprise endpoint engineering or advanced support, with hands-on experience in:
Technologies & Frameworks
-
Microsoft Products:
- Windows 11, Azure AD (Entra ID), Microsoft Intune (Endpoint Manager), MECM (co-management)
- Active Directory, Group Policy, RSAT tools
- Intune compliance policies
- Office 365 deployment & update services
- LAPS (Local Administrator Password Solution) & Privilege Access Management
-
Zero Trust & Security:
- Zero Trust architecture, conditional access, and identity-based controls
-
Networking Fundamentals:
- DNS, DHCP, VPN, Proxies
Mobile Device Management (MDM)
- iOS/iPadOS, Android Enterprise, macOS management
- Enrollment profiles, device compliance, app protection policies
Get help with your application
Your very own career expert that helps elevate your application to the next level.
PowerShell Proficiency
- Script development, troubleshooting, and system automation
- Understanding of basic command-line syntax and error resolution
Preferred Skills/Areas to Stand Out
- PowerShell App Deployment Toolkit (PSADT):
- Script and deployment automation
- Customised application installation/remediation logic
- Advanced MECM Administration:
- Collection design and schema management
- Endpoint Modernisation:
- Autopilot (user-driven, auto-wipe, hybrid) and zero-touch provisioning
- Cloud-first imaging strategies via DISM/IMAGX/WIM bundle
- Software Packaging Technologies:
- MSIX, MSI, EXE, and IntuneWin frameworks
- Moderate-level Certifications:
- Microsoft Endpoint/Azure/Cloud Security credentials
Benefits Offered by Fitch
Work-Life Balance
- Hybrid work model (2–3 in-office days, location-based flexibility)
Career Growth
- Dedicated training programs
- Leadership development & mentorship
- Retirement planning & tuition reimbursement
Wellbeing & Family Support
- Comprehensive healthcare coverage (mental, physical, financial wellness)
- Generous parental leave policy
- Employee Resource Groups for inclusivity
Impact & Engagement
- Paid volunteer days and charity donations
- Collaborative culture where all perspectives are valued
Note on Compliance: As a coveted credit ratings agency, Fitch maintains rigid adherence to independence and anti-conflict-of-interest standards. Successful candidates must disclosures securities holdings and conflicts pre-employment.
Fitch is an Equal Opportunity Employer. We consider candidates for all roles without regard to race, national origin, sex, sexual orientation, gender identity, disability, veteran status, or other protected attributes. #LI-HYBRID #LI-KC1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location