- Employment
- Full-Time
- Seniority
- Senior
- Department
- IT & Technology Systems
- Posted
- Nov 4, 2026
About Richemont
Richemont is one of the world’s foremost luxury groups, stewarding a distinguished portfolio of maisons across jewellery, watchmaking, fashion and accessories, including Cartier, Van Cleef & Arpels, Jaeger-LeCoultre and Montblanc. As an employer, it combines the heritage of artisanal excellence with a forward-looking culture shaped by innovation, client-centricity and responsible business. Its global teams operate in an environment that values craftsmanship, entrepreneurship and collaboration, offering opportunities to grow within iconic maisons and group functions alike. Richemont attracts professionals who aspire to contribute to enduring luxury, preserving rare savoir-faire while helping define the future of high craftsmanship.
The Endpoint Management Engineer designs, builds, modernizes, and operates Windows endpoint management solutions across Richemont’s global enterprise, focusing on Windows 11, Microsoft Intune, automation, security, and performance. The role delivers endpoint engineering across corporate, manufacturing, retail, and contact centre environments; it is full-time.
Role & Responsibilities
- Engineer and maintain Windows 11 endpoint configurations, policies, and security baselines using Microsoft Intune.
- Design and optimize Windows Autopilot provisioning, deployment, and device lifecycle management.
- Drive the transition from legacy Group Policy Objects (GPO) to modern cloud-based management.
- Manage Windows updates, patching, application deployments, compliance policies, and configuration profiles.
- Troubleshoot complex issues across Windows, Intune, Entra ID, and hybrid identity integrations.
- Proactively identify and resolve Windows performance issues affecting boot times, application responsiveness, and the overall user experience.
- Use endpoint telemetry and troubleshooting tools to improve platform stability and reliability.
- Collaborate with Security teams to implement endpoint hardening, security baselines, and compliance requirements.
- Use Tanium and Palo Alto Cortex XDR for endpoint visibility, troubleshooting, and remediation.
- Lead root-cause analysis and permanently resolve recurring technical issues.
- Develop and maintain scripts to automate provisioning, configuration, remediation, and operational activities.
- Integrate Microsoft Graph API and other enterprise APIs to automate endpoint management activities.
- Contribute to Infrastructure-as-Code adoption, Git-based workflows, and CI/CD practices.
- Maintain technical documentation, reusable scripts, and engineering standards.
- Deliver engineering initiatives and platform improvements through Agile practices using Jira.
- Collaborate with Security, Identity, Networking, Workplace, and other Endpoint Engineering teams.
- Support complex L3 escalations and contribute to problem management and permanent fixes.
- Apply ITIL practices to incident, problem, and change management while maintaining an engineering-first approach.
Qualifications
- Strong hands-on experience engineering and managing Windows endpoints in large-scale enterprise environments.
- Advanced knowledge of Windows 11 architecture, configuration, troubleshooting, and performance optimization.
- Proven expertise with Microsoft Intune, including device enrollment and Windows Autopilot, configuration profiles and security baselines, Windows Update for Business and patch management, and compliance policies and remediation scripts.
- Solid understanding of Active Directory, Microsoft Entra ID, hybrid identity, and GPO-to-Intune migration.
- Advanced PowerShell scripting skills and experience automating Windows administration.
- Strong troubleshooting capabilities across Windows OS, authentication, networking, security, and application performance.
- Experience working with enterprise endpoint security and management solutions.
- Strong engineering mindset focused on automation, standardization, and reliability.
- Ability to challenge legacy practices and propose practical improvements.
- Strong ownership, accountability, and documentation habits.
- Excellent written and verbal English communication skills.
- The following experience is advantageous but not mandatory: cross-platform endpoint management; virtualization, browser and secure access; DevOps, automation and cloud; endpoint security and observability.
Skills
Workplace
The successful candidate will be located in Moscavide, Lisbon, Portugal, with easy access to Lisbon.
Explore jobs in Portugal.
Culture
Richemont fosters a refined, international workplace where its Maisons preserve exceptional craftsmanship while benefiting from the strength and perspective of a global luxury group. As an employer, it values long-term stewardship, collaboration, innovation, and the development of talent within an environment shaped by heritage, creativity, and high standards.
About Cerulean
Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.
Frequently Asked Questions
The luxury industry is characterised by a diverse and nuanced nomenclature. Esteemed houses frequently employ proprietary terminology, and even within a single organisation like Richemont, titles may vary across global markets to reflect local conventions. To ensure absolute clarity, Cerulean assigns a standardised, industry-coherent canonical title to every listing. However, it is worth noting that this role is functionally synonymous with «Endpoint Engineer», «Windows Endpoint Engineer», «Endpoint Systems Engineer», «Modern Workplace Engineer», and other variations. Our sophisticated search architecture anticipates these variations, ensuring that inquiries using related terms will seamlessly yield the exact roles you desire.