Workplace Engineering Lead

We are looking for a Workplace Lead to own the full Workplace Services domain - device lifecycle management, M365 collaboration stack, and telephony. Accountable for service quality, automation maturity, and the technical roadmap for everything between the user's hands and the infrastructure layer.

Responsibilities

• Own the end-to-end device lifecycle: procurement (Lenovo Business Portal), staging, Intune/Autopilot enrolment, deployment, refresh, and secure decommissioning
• Drive SCCM-to-Intune migration maturity - close the migration to modern management for the full Windows estate
• Oversee software packaging, testing, and distribution - manage the application catalog and approval workflows
• Own OS and application patching strategy: ring-based deployment, compliance reporting, exception management
• Manage AVD/VDI environment (300 sessions): image management, performance tuning, scaling, and cost optimization
• Coordinate with Onsite Support Engineers on physical staging and device swap execution at the four sites
• Maintain asset accuracy: CMDB reconciliation, stock level management, warranty tracking
• Own the M365 tenant operations: Exchange Online, Teams, SharePoint Online, OneDrive, Office apps
• Manage mailbox lifecycle, distribution lists, shared mailboxes, mail flow rules, and retention policies
• Oversee Teams governance: team provisioning policies, guest access controls, app management, compliance settings
• Drive SharePoint site architecture standards, permissions governance, and storage management
• Own Cloud9 turret telephony - configuration, user provisioning, incident escalation to vendor
• Manage Teams Phone deployment: number assignment, call queues, auto-attendants, policy configuration
• Oversee SIM card and mobile phone stock management - procurement, provisioning, and lifecycle tracking
• Coordinate with carriers and Cloud9 vendor on SLA adherence and capacity planning
• Manage two offshore teams operating on-call
• Work on resource planning, shift coverage, utilization, and performance management
• Define and track team KPIs: patching compliance, deployment SLAs, M365 service health, telephony uptime
• Drive automation adoption within the workplace domain
• Own technical escalation for all workplace issues

Requirements

• 7+ years in workplace / end-user computing, at least 3 years in a lead or management capacity
• Deep hands-on knowledge of Microsoft Intune, SCCM/MECM, Autopilot, and Windows 10/11 lifecycle management, software packaging
• Strong M365 administration experience: Exchange Online, Teams, SharePoint, Entra ID
• Experience managing AVD/VDI at scale (Azure Virtual Desktop or Citrix)
• Proven ability to supervise and mentor offshore teams - scheduling, quality, knowledge transfer
• Comfortable with vendor management: Lenovo enterprise, Swisscom carriers
• Fluent English; German is a plus
• ITIL 4 Foundation minimum

Nice to have

• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102) or Endpoint Administrator (MD-102)
• Experience with Cloud9 trading floor telephony
• Familiarity with M365 licensing
• Background in energy, utilities, or financial services (trading floor exposure particularly useful)
• Experience with device-as-a-service or zero-touch provisioning models at scale