April 2026

Job Title: Configuration Management Systems Engineer, Windows Endpoint Patching

Location: Mexico Center of Excellence (COE)

Summary

JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Global Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The idóneo candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.

Key Responsibilities

- Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third‑party applications using Intune (primary), MCM, and PatchMyPC.
- Configure and manage Autopilot for device provisioning.
- Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).
- Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.
- Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.
- Act as a senior escalation point for complex endpoint issues,



coordinating with internal support teams and external vendors to ensure timely resolution.
- Provide input into process improvements and the future direction of endpoint management technologies.
- Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.
- Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long‑term strategies.
- Participate in a global, follow‑the‑sun support model to address critical system issues and perform scheduled maintenance.

Required Qualifications

- In‑depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.
- Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user‑driven provisioning and pre‑provisioning) for device enrollment.
- Experience configuring and maintaining Autopilot using ESP, group tags, etc.
- Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM,



Intune, and Windows log files, from both the tenant consoles and endpoint devices.
- Proficient in scripting with PowerShell to automate tasks and implement solutions.
- Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.
- Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.
- Demonstrated experience with patch testing and application testing methodologies.
- Experience with Microsoft Configuration Manager (MCM/SCCM).
- Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.
- Excellent technical, analytical, and problem‑solving skills with the ability to manage multiple projects simultaneously in a fast‑paced environment.
- Strong communication skills for effective collaboration with global teams.
- A reliable, self‑motivated, and disciplined work ethic.

Preferred Qualifications

- Experience with application packaging and deployment techniques.
- Knowledge of and experience with Microsoft Graph API.
- Experience using AI Assistants to improve efficiency and simplify day‑to‑day tasks is preferred.
- Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.
- Experience with virtual desktop environments (e.g., AWS Workspaces).
- Previous experience communicating directly with Executive Leadership.
- Prior experience working within a global, distributed team structure.

#J-18808-Ljbffr

📌 Configuration Management Systems Engineer, Windows Endpoint Patching (México)
🏢 Jll
📍 México