Your responsibilities
About our team
Our Core Engineering Team is the backbone of Nordea global technology ecosystem. We are a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization.
We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.
Main responsibilities in this role:
* Platform Strategy & Roadmap Ownership: Define, publish, and execute the multi-year technical roadmap for the enterprise Microsoft Endpoint Configuration Manager (MECM/SCCM) hierarchy. Manage infrastructure version upgrades, site system expansions, and cloud-management gateway (CMG) integration strategies to prevent technical debt.
* Global Architecture & Configuration Governance: Design, maintain, and govern the global SCCM site architecture, including Primary Sites, Central Administration Sites (CAS), Management Points, and Distribution Points. Establish standardized client settings, boundary groups, and content delivery strategies to optimize network bandwidth across thousands of endpoints.
* Enterprise Patch & Vulnerability Orchestration: Own the end-to-end design and execution of the automated enterprise patching framework (WSUS/SUP integration). Oversee Software Update Groups and Automatic Deployment Rules (ADRs) to remediate critical security vulnerabilities within strict corporate SLAs without impacting business productivity.
* Application Delivery & Image Deployment Lifecycle: Lead the governance and architecture for enterprise OS Deployment (OSD) task sequences, driver management, and global application packaging standards. Champion "Zero-Touch" or "Light-Touch" provisioning frameworks to streamline hardware refresh cycles across the global footprint.
* Vendor & Software Asset Management: Act as the technical interface for Microsoft engineering support and hardware vendors. Leverage SCCM asset intelligence and software metering data to provide clear reports on hardware compliance, software usage, and license utilization to optimize enterprise software spend.
* Stakeholder Communication & Backlog Management: Translate platform telemetry and compliance percentages into executive-level dashboards for InfoSec and leadership teams. Prioritize the platform backlog, balancing critical infrastructure health upgrades with the deployment requests of various business units.
Our requirements
Desirable experience and skills (you don't have to have them all, to be a good candidate):
* Enterprise SCCM/MECM Expertise: Deep knowledge of SCCM internals, including WMI, site database schemas, SQL Server reporting services (SSRS), log analysis (cmtrace), and troubleshooting complex client-to-site communication failures.
* Co-Management & Modern Workplace Evolution: Solid experience integrating traditional SCCM architectures with Microsoft Intune and Azure AD/Entra ID to execute a seamless tenant attach and co-management strategy for modern endpoint management.
* Advanced Automation & Scripting: Highly proficient in utilizing PowerShell to automate bulk SCCM tasks, modify task sequences, build custom scripts for application deployment, and enforce configurations via PowerShell DSC or Configuration Baselines.
* Infrastructure & Network Integration: Robust understanding of how SCCM interacts with underlying enterprise infrastructure, including Active Directory, Group Policies (GPOs), DNS, DHCP, PXE booting, and network delivery optimization protocols (Peer Cache, Delivery Optimization).
* Product Ownership & TCO Mindset: Ability to treat the deployment platform as an internal scalable product. Proven track record in analyzing and optimizing the Total Cost of Ownership (TCO) for endpoint management tools, evaluating infrastructure hosting costs (on-prem vs. Azure CMG), and justifying investments to business stakeholders.
* Lifecycle & Continuity Management: Experience architecting disaster recovery, high-availability, and backup procedures for critical SCCM infrastructure to ensure continuous deployment capabilities during site or network failures.
It would be ideal if you also were:
* Proficient in English, spoken and written C1+.
* Experienced working for a financial institution.