April 2026 Job Title: Configuration Management Systems Engineer, Windows Endpoint Patching

Location:
Mexico Center of Excellence (COE) Summary JLL Technologies seeks an experienced Configuration Management Systems Engineer to join our Integral Configuration Management team within the Digital Workspace Services group. This full-time position, based in our Mexico Center of Excellence (COE), will support a global environment of approximately 60,000 Windows workstations, including about 600 AWS Workspace virtual environments. This role is responsible for the system administration of our Windows endpoints, with a primary focus on lifecycle management, security, and configuration. The ideal candidate will be a forward-thinking professional adept at troubleshooting complex issues, driving process improvements, and collaborating with global teams.

Key Responsibilities
• Test, validate, and deploy monthly and on-demand patches for Windows OS, device drivers, BIOS, Microsoft 365 products, and third-party applications using Intune (primary), MCM, and PatchMyPC.
• Configure and manage Autopilot for device provisioning.
• Define, implement, and manage security patching compliance and configuration policies using Microsoft Intune and Group Policy (GPO).
• Monitor and troubleshoot the Windows update process, both from the Microsoft tenant and the endpoint device.
• Collaborate with the security team to monitor and remediate critical vulnerabilities (CVEs), including researching threats, developing action plans, and implementing solutions.
• Act as a senior escalation point for complex endpoint issues,



coordinating with internal support teams and external vendors to ensure timely resolution.
• Provide input into process improvements and the future direction of endpoint management technologies.
• Stay current with emerging technologies and leverage Artificial Intelligence (AI) where applicable to enhance efficiency and security.
• Develop and maintain internal documentation, including Knowledge Base articles, environment diagrams, and standard operating procedures. Provide input and recommendations for our team roadmap and long-term strategies.
• Participate in a global, follow-the-sun support model to address critical system issues and perform scheduled maintenance. Required Qualifications
• In-depth experience with the Intune for patching (OS, drivers, BIOS, applications) and device management, including Intune AutoPatch. Familiarity with Intune Suite and/or HotPatch a plus.
• Expertise in the Windows 11 operating system and the modern Windows management lifecycle, including use of Autopilot (user-driven provisioning and pre-provisioning) for device enrollment.
• Experience configuring and maintaining Autopilot using ESP, group tags, etc.
• Experience troubleshooting Windows Update and Windows 11 issues, including proficiency with MCM, Intune,



and Windows log files, from both the tenant consoles and endpoint devices.
• Proficient in scripting with PowerShell to automate tasks and implement solutions.
• Experience and proficiency with AI chat tools such as ChatGPT, Claude, and similar platforms.
• Experience with reporting and analytics, including running reports within Intune and using tools like Power BI to visualize data.
• Demonstrated experience with patch testing and application testing methodologies.
• Experience with Microsoft Configuration Manager (MCM/SCCM).
• Ability to support the Americas region time zone and adhere to the Americas working days and holiday schedule.
• Excellent technical, analytical, and problem-solving skills with the ability to manage multiple projects simultaneously in a fast-paced environment.
• Strong communication skills for effective collaboration with global teams.
• A reliable, self-motivated, and disciplined work ethic. Preferred Qualifications
• Experience with application packaging and deployment techniques.
• Knowledge of and experience with Microsoft Graph API.
• Experience using AI Assistants to improve efficiency and simplify day-to-day tasks is preferred.
• Knowledge and use of AI Agents (Agentic AI), particularly for device management tasks, a plus.
• Experience with virtual desktop environments (e.g., AWS Workspaces).
• Previous experience communicating directly with Executive Leadership.
• Prior experience working within a global, distributed team structure.

📌 Configuration Management Systems Engineer, Windows Endpoint Patching (México)
🏢 Jll
📍 México