End User Computing Team Lead

Job Title: Principal, End User Computing Team Lead
Contract Type: 6-month fixed-term contract
Location: London, St Pauls
Department: Corporate Technology
Reporting to: Head of Infrastructure & Architecture
What the Hiring Manager says….
‘ICG is seeking an experienced End User Computing Team Lead to provide leadership and technical direction across our global workplace technology services. Reporting to the Head of Infrastructure and Architecture, you will lead the day-to-day delivery, security and continual improvement of endpoint services, working closely with the Service Desk, Infrastructure, Architecture and Cyber Security teams.
This is a hands-on role, balancing technical delivery and leadership for someone who combines strong Microsoft endpoint expertise with a passion for improving the employee technology experience. You will have the opportunity to shape how colleagues securely access and use workplace technology, while delivering visible improvements across device management, software deployment, patching, automation and digital employee experience (DEX).’
Summary of our opportunity
The End User Computing Team Lead is responsible for the operational delivery, support, security and continual improvement of end-user technology across the organisation. The role leads endpoint services spanning Windows laptops and desktops, mobile devices, Windows 365 Cloud PCs, Microsoft Intune, Windows Autopilot, Microsoft 365 applications, software deployment, endpoint security controls and user experience monitoring.
You will act as the technical lead and escalation point for workplace technology, ensuring employees can securely, reliably and efficiently access the tools required to perform their roles. The role balances operational leadership with project delivery, supplier management, technical governance and service improvement.
Primary responsibilities for this role include (but are not limited to):
Leadership and team management
Provide day-to-day leadership, direction and guidance to EUC engineers and service providers.
Prioritise workloads and ensure operational tickets, service requests and project activities are delivered within agreed service levels.
Act as the escalation point for complex endpoint and workplace technology issues.
Promote knowledge sharing, effective documentation and close collaboration across internal and outsourced teams.
Drive a culture of ownership, automation and continual service improvement.
Endpoint management and lifecycle
Own the lifecycle management of Windows laptops, desktops, mobile devices and Windows 365 Cloud PCs.
Lead the administration and continual improvement of Microsoft Intune, including configuration profiles, compliance policies, security baselines and application assignments.
Maintain and enhance Windows Autopilot and Autopilot Device Preparation processes, secure standard builds and device handover procedures.
Oversee hardware refresh, replacement and disposal programmes, maintaining accurate asset and configuration data.
Ensure the endpoint estate remains standardised, supportable and aligned with business, security and regulatory requirements.
Software deployment, patching and vulnerability remediation
Own software packaging, testing, deployment, upgrade and removal processes across the endpoint estate.
Ensure operating systems, Microsoft 365 Apps and third-party applications remain patched and compliant within agreed targets.
Oversee endpoint management and automation platforms used for application deployment, patching, inventory and remediation.
Work with Cyber Security and infrastructure teams to remediate vulnerabilities identified through scanning, monitoring and threat intelligence.
Develop repeatable, controlled deployment processes with clear reporting, rollback and exception management.
Microsoft 365 workplace services
Support and improve Microsoft 365 workplace applications and services, including Outlook, Teams, OneDrive, SharePoint, Microsoft 365 Apps and Microsoft 365 Copilot.
Partner with business stakeholders to improve productivity, adoption and user experience.
Support responsible AI enablement and the operational adoption of Copilot and related workplace capabilities.
Contribute to service roadmaps, standards and technical decisions affecting the modern workplace.
Endpoint security and compliance
Implement and maintain endpoint security controls in partnership with Cyber Security.
Support Conditional Access, multifactor authentication, application control, endpoint protection, encryption and device compliance initiatives.
Monitor endpoint compliance and investigate data quality, duplication and coverage gaps across management and security platforms.
Ensure operational processes support internal policy, audit and regulatory requirements.
Provide clear evidence, reporting and remediation plans for endpoint risks and control exceptions.
Digital employee experience and service improvement
Monitor and improve digital employee experience using endpoint telemetry, performance data, incident trends and user feedback.
Identify recurring issues and lead proactive remediation to improve device performance, reliability and employee satisfaction.
Identify opportunities for automation, self-service and reduced manual support effort.
Define meaningful service measures and provide management updates on performance, risk and improvement activity .
Supplier, stakeholder and project delivery
Manage relationships with technology vendors, deployment partners and service providers, ensuring they meet operational and security expectations.
Participate in product evaluations, proofs of concept, commercial reviews and technology selection exercises.
Provide technical input into strategic planning, architecture decisions and workplace technology roadmaps.
Produce and maintain technical documentation, operating procedures, project updates and management reports.
Key Requirements/ Qualifications
You will have demonstrable experience of:
Essential
Strong hands-on experience administering Microsoft Intune and modern endpoint management services.
Strong knowledge of Windows 11 administration, configuration, deployment and troubleshooting.
Experience designing, maintaining and supporting Windows Autopilot or Autopilot Device Preparation services.
Experience supporting Microsoft 365 workplace services in an enterprise environment.
Experience delivering software deployment, application lifecycle management and patching solutions.
Good understanding of endpoint security, compliance, Conditional Access, encryption and endpoint protection controls.
Experience leading technical teams, managed service providers or delivery partners.
Ability to analyse complex technical issues and translate findings into clear decisions and remediation plans.
Excellent written and verbal communication, with the ability to engage and influence technical and non-technical stakeholders.
An organised and delivery-focused approach, with the ability to balance operational priorities and project commitments.
Desirable
Experience with Windows 365 Cloud PCs and mobile device management for iOS and Android.
Experience with digital employee experience, endpoint analytics or user experience monitoring platforms such as Nexthink.
Experience with application control technologies such as ThreatLocker.
PowerShell scripting and automation experience.
Working knowledge of Microsoft Entra ID, Microsoft Defender and Microsoft Purview capabilities relevant to endpoint services.
Experience supporting Microsoft 365 Copilot or enterprise AI adoption.
ITIL and/or relevant Microsoft certifications.
Experience working within financial services or another regulated environment.
Key deliverables during the 6-month contract
Maintain endpoint compliance, security and service continuity across the managed estate.
Ensure successful delivery of operating system, application and security patching activity.
Maintain and enhance Microsoft Intune, Windows Autopilot and Autopilot Device Preparation services.
Support laptop lifecycle, deployment and refresh programmes across global offices.
Improve endpoint performance, reliability and digital employee experience through proactive monitoring and remediation.
Support ongoing Microsoft 365 Copilot and workplace AI initiatives.
Keep operational processes, technical standards and support documentation current and usable.
Provide clear leadership, prioritisation and technical direction to the EUC function and its delivery partners.
Personal Attributes
Personal attributes that will make you successful in this role include but are not limited to:
A confident and su