UK | Cyber Security Engineer ECO L4

Intune Endpoint Privilege Management (EPM) Specialist – Endpoint Security Engineer

Remote / Hybrid

We are seeking a highly skilled Endpoint Privilege Management (EPM) Specialist to lead the design and implementation of Microsoft Intune’s least privilege and Just-in-Time (JIT) elevation framework across a large enterprise environment.
This role is central to strengthening endpoint security, eliminating local admin rights, and enabling secure, auditable privilege elevation aligned to Zero Trust principles .

What You’ll Be Doing You will take ownership of the enterprise EPM capability, including:

• Designing and deploying Microsoft Intune Endpoint Privilege Management (EPM) at scale
• Defining and managing elevation rules, approval workflows, and automation models
• Implementing Just Enough Access (JEA) and Just-in-Time (JIT) privilege elevation
• Eliminating permanent local admin rights across Windows 10/11 estate
• Integrating EPM into broader Zero Trust and Microsoft Defender security architecture

Monitoring, Security & Reporting

• Build dashboards for elevation activity, risk trends, and anomalous behaviour
• Use Log Analytics (KQL), Microsoft Defender, and Graph API for automation and insights
• Provide regular reporting to security governance and risk forums
• Support audit and compliance requirements with clear privilege reporting

Collaboration & Stakeholder Engagement

• Work closely with Security, Identity, Endpoint, and Application teams
• Act as the SME for application elevation requirements and security exceptions
• Deliver documentation, runbooks, and operational guidance
• Lead training sessions for IT support and security operations teams

What We’re Looking For Technical Expertise

• Strong hands-on experience with Microsoft Intune Endpoint Privilege Management (EPM)
• Deep understanding of:
  • Least privilege / Zero Trust security models
  • Windows endpoint security and hardening
  • Application analysis for privilege requirements
  • Microsoft Defender for Endpoint (ASR policies)
  • Log Analytics / KQL for security monitoring
• Strong PowerShell scripting and automation experience
• Experience integrating with Microsoft Graph API

Desirable Experience

• Microsoft Defender XDR / vulnerability management
• Conditional Access / Identity Protection
• AppLocker or Windows Defender Application Control
• Certifications such as:
  • MD-102 Endpoint Administrator
  • SC-200 Security Operations Analyst
  • SC-300 Identity & Access Administrator

Soft Skills

• Strong communication skills with technical and non-technical stakeholders
• Analytical mindset with excellent root cause analysis ability
• Structured and process-driven approach to security governance
• Ability to simplify complex endpoint security concepts

Key Outcomes of the Role

• Enterprise-wide rollout of Microsoft Intune Endpoint Privilege Management
• Elimination of local admin rights across all endpoints
• Secure, frictionless JIT elevation experience for end users
• Strong governance, auditability, and compliance reporting
• Continuous improvement of endpoint privilege and security automation

If you’re passionate about modern endpoint security, least privilege enforcement, and Microsoft security ecosystems , this is a high-impact role driving enterprise-wide transformation.