Job Title: Principal, End User Computing Team Lead
Contract Type: 6-month fixed-term contract
Location: London, St Pauls
Department: Corporate Technology
Reporting to: Head of Infrastructure & Architecture
What the Hiring Manager says….
‘ICG is seeking an experienced End User Computing Team Lead to provide leadership and technical direction across our global workplace technology services. Reporting to the Head of Infrastructure and Architecture, you will lead the day-to-day delivery, security and continual improvement of endpoint services, working closely with the Service Desk, Infrastructure, Architecture and Cyber Security teams.
This is a hands-on role, balancing technical delivery and leadership for someone who combines strong Microsoft endpoint expertise with a passion for improving the employee technology experience. You will have the opportunity to shape how colleagues securely access and use workplace technology, while delivering visible improvements across device management, software deployment, patching, automation and digital employee experience (DEX).’
Summary of our opportunity
The End User Computing Team Lead is responsible for the operational delivery, support, security and continual improvement of end-user technology across the organisation. The role leads endpoint services spanning Windows laptops and desktops, mobile devices, Windows 365 Cloud PCs, Microsoft Intune, Windows Autopilot, Microsoft 365 applications, software deployment, endpoint security controls and user experience monitoring.
You will act as the technical lead and escalation point for workplace technology, ensuring employees can securely, reliably and efficiently access the tools required to perform their roles. The role balances operational leadership with project delivery, supplier management, technical governance and service improvement.
Primary responsibilities for this role include (but are not limited to):
Leadership and team management
- Provide day-to-day leadership, direction and guidance to EUC engineers and service providers.
- Prioritise workloads and ensure operational tickets, service requests and project activities are delivered within agreed service levels.
- Act as the escalation point for complex endpoint and workplace technology issues.
- Promote knowledge sharing, effective documentation and close collaboration across internal and outsourced teams.
- Drive a culture of ownership, automation and continual service improvement.
Endpoint management and lifecycle
- Own the lifecycle management of Windows laptops, desktops, mobile devices and Windows 365 Cloud PCs.
- Lead the administration and continual improvement of Microsoft Intune, including configuration profiles, compliance policies, security baselines and application assignments.
- Maintain and enhance Windows Autopilot and Autopilot Device Preparation processes, secure standard builds and device handover procedures.
- Oversee hardware refresh, replacement and disposal programmes, maintaining accurate asset and configuration data.
- Ensure the endpoint estate remains standardised, supportable and aligned with business, security and regulatory requirements.
Software deployment, patching and vulnerability remediation
- Own software packaging, testing, deployment, upgrade and removal processes across the endpoint estate.
- Ensure operating systems, Microsoft 365 Apps and third-party applications remain patched and compliant within agreed targets.
- Oversee endpoint management and automation platforms used for application deployment, patching, inventory and remediation.
- Work with Cyber Security and infrastructure teams to remediate vulnerabilities identified through scanning, monitoring and threat intelligence.
- Develop repeatable, controlled deployment processes with clear reporting, rollback and exception management.
Microsoft 365 workplace services
- Support and improve Microsoft 365 workplace applications and services, including Outlook, Teams, OneDrive, SharePoint, Microsoft 365 Apps and Microsoft 365 Copilot.
- Partner with business stakeholders to improve productivity, adoption and user experience.
- Support responsible AI enablement and the operational adoption of Copilot and related workplace capabilities.
- Contribute to service roadmaps, standards and technical decisions affecting the modern workplace.
Endpoint security and compliance
- Implement and maintain endpoint security controls in partnership with Cyber Security.
- Support Conditional Access, multifactor authentication, application control, endpoint protection, encryption and device compliance initiatives.
- Monitor endpoint compliance and investigate data quality, duplication and coverage gaps across management and security platforms.
- Ensure operational processes support internal policy, audit and regulatory requirements.
- Provide clear evidence, reporting and remediation plans for endpoint risks and control exceptions.
Digital employee experience and service improvement
- Monitor and improve digital employee experience using endpoint telemetry, performance data, incident trends and user feedback.
- Identify recurring issues and lead proactive remediation to improve device performance, reliability and employee satisfaction.
- Identify opportunities for automation, self-service and reduced manual support effort.
- Define meaningful service measures and provide management updates on performance, risk and improvement activity .
Supplier, stakeholder and project delivery
- Manage relationships with technology vendors, deployment partners and service providers, ensuring they meet operational and security expectations.
- Participate in product evaluations, proofs of concept, commercial reviews and technology selection exercises.
- Provide technical input into strategic planning, architecture decisions and workplace technology roadmaps.
- Produce and maintain technical documentation, operating procedures, project updates and management reports.
Key Requirements/ Qualifications
You will have demonstrable experience of:
Essential
- Strong hands-on experience administering Microsoft Intune and modern endpoint management services.
- Strong knowledge of Windows 11 administration, configuration, deployment and troubleshooting.
- Experience designing, maintaining and supporting Windows Autopilot or Autopilot Device Preparation services.
- Experience supporting Microsoft 365 workplace services in an enterprise environment.
- Experience delivering software deployment, application lifecycle management and patching solutions.
- Good understanding of endpoint security, compliance, Conditional Access, encryption and endpoint protection controls.
- Experience leading technical teams, managed service providers or delivery partners.
- Ability to analyse complex technical issues and translate findings into clear decisions and remediation plans.
- Excellent written and verbal communication, with the ability to engage and influence technical and non-technical stakeholders.
- An organised and delivery-focused approach, with the ability to balance operational priorities and project commitments.
Desirable
- Experience with Windows 365 Cloud PCs and mobile device management for iOS and Android.
- Experience with digital employee experience, endpoint analytics or user experience monitoring platforms such as Nexthink.
- Experience with application control technologies such as ThreatLocker.
- PowerShell scripting and automation experience.
- Working knowledge of Microsoft Entra ID, Microsoft Defender and Microsoft Purview capabilities relevant to endpoint services.
- Experience supporting Microsoft 365 Copilot or enterprise AI adoption.
- ITIL and/or relevant Microsoft certifications.
- Experience working within financial services or another regulated environment.
Key deliverables during the 6-month contract
- Maintain endpoint compliance, security and service continuity across the managed estate.
- Ensure successful delivery of operating system, application and security patching activity.
- Maintain and enhance Microsoft Intune, Windows Autopilot and Autopilot Device Preparation services.
- Support laptop lifecycle, deployment and refresh programmes across global offices.
- Improve endpoint performance, reliability and digital employee experience through proactive monitoring and remediation.
- Support ongoing Microsoft 365 Copilot and workplace AI initiatives.
- Keep operational processes, technical standards and support documentation current and usable.
- Provide clear leadership, prioritisation and technical direction to the EUC function and its delivery partners.
Personal Attributes
Personal attributes that will make you successful in this role include but are not limited to:
- A confident and supportive leader who creates clarity, accountability and trust.
- A pragmatic, hands-on technologist who is comfortable moving between strategy, projects and operational detail.
- A collaborative communicator who builds strong relationships across technology, security, business teams and suppliers.
- Analytical, curious and evidence-led, with a strong focus on root-cause resolution.
- Resourceful and self-sufficient, with a continuous improvement mindset.
- Calm under pressure, well organised and able to manage competing priorities.
Our Global Benefits Framework is centred around these 3 key attributes:
- Wellbeing - Supporting your mental, physical and financial wellbeing as well as your lifestyle needs.
- Inclusivity – Fit for purpose and competitive, no matter who or where you are.
- Longevity – Long Term and sustainable in design.
Inclusion is one of ICG’s key values and we are committed to creating an equitable and inclusive workplace for everyone. By welcoming different perspectives, we strengthen ICG’s performance, enrich decision-making and contribute to better outcomes for our clients, colleagues, and the markets we serve. Accordingly, our recruitment processes provide equal employment opportunities to all applicants and employees, regardless of age, ethnicity, disability, sex, gender, sexual orientation, religion, or any other characteristic protected by local law.
We are equally committed to delivering an inclusive and accessible candidate experience. If you require information in an alternative format, additional time for assessments, an adjusted interview schedule, or any other support during the recruitment process, please let us know.
