Endpoint Specialist

Position Summary

The Endpoint Specialist is a hands-on technical role at the intersection of endpoint engineering and frontline support. This role owns the configuration, deployment, and lifecycle of corporate end-user devices and workplace technology including desktops, laptops, mobile devices, printers, and meeting room technology within Concert's Digital Experience (DEX) standards. Success in this role means shorter provisioning times, higher device compliance, standardized configurations, fewer repeat hardware/access issues, and a growing layer of automation that makes endpoint management scalable.

Key Responsibilities

Endpoint Engineering & Device Management

• Build and maintain device configuration profiles, compliance policies, conditional access integration, and update rings for Windows and iOS devices, plus baseline security hardening so every managed device meets Concert's standards before an employee logs in.
• Package, test, and deploy end-user applications so installs are current, compatible, and require no manual IT intervention.
• Monitor device compliance and Windows Update rings across the estate; investigate and remediate non-compliant devices; report compliance metrics monthly to the DEX operational dashboard.

Device Provisioning, Lifecycle & Mobile Management

• Design and continuously improve automated device provisioning (deployment profiles, enrollment status pages, naming conventions) to minimize manual setup and reduce lead time.
• Manage the full device lifecycle — procurement coordination, configuration, refresh planning, warranty tracking, and secure decommissioning — and maintain an accurate device/peripheral inventory for audit and asset management.
• Administer mobile device enrollment, compliance, and App Protection Policies (MDM/MAM) to secure corporate data on managed devices while preserving a positive user experience.

Application, Printer & Meeting Room Technology

• Own the end-user application catalogue, including Microsoft 365 Apps update channels and license assignment, and govern new software requests for security, compatibility, and licensing.
• Administer printer and peripheral infrastructure across Concert offices, coordinating with vendors on service, firmware, and refresh cycles.
• Manage Concert's meeting room and AV technology, including Microsoft Teams Rooms — conducting proactive health checks and supporting new room installations with facilities and vendors.

Support, ITSM & Employee Lifecycle

• Provide Level 2/3 support for endpoint-related incidents and requests, resolving within SLA and documenting fully in ServiceNow.
• Partner with the Service Desk to build knowledge articles and escalation paths that improve first-call resolution and reduce unnecessary escalations.
• Own technical device delivery for onboarding, offboarding, and role/location changes, and contribute endpoint metrics to monthly DEX reporting for Service Operations Review.

Please note this is a general description of the tasks and skills required. Additional responsibilities and duties may be required to successfully perform this role.

Required Knowledge & Skills

Required

• Minimum 5 years of hands-on endpoint management experience in an enterprise Microsoft environment.
• Degree in Computer Science, Systems Engineering, or equivalent experience.
• Proficiency with Active Directory and Entra ID administration.
• Strong experience with Microsoft 365 Online administration, including SharePoint, Teams, and OneDrive.
• Advanced PowerShell scripting and automation skills.
• Strong written and verbal communication skills.
• Demonstrated ability to lead projects from concept through delivery, using a structured project management approach.
• Strong communication and stakeholder management skills — this role works daily with the Service Desk, security team, facilities, vendors, and senior leadership.
• Customer-service orientation, with experience supporting end users directly on hardware, application, and connectivity issues.

Preferred 

• ITIL Foundation certification and ServiceNow working knowledge is an asset.
• Microsoft Endpoint certifications: Endpoint Administrator Associate (MD-102), Administrator Expert (MS-102), M365 Fundamentals (MS-900), Teams Administrator Associate (MS-700)
• Working knowledge of networking design, network security, and VPN technology.
• Working knowledge of Operational Technology (OT): experience with building automation, BMS, or smart building integration.