Senior Systems Engineer (End User Computing)

KPMG New Zealand is part of the international KPMG network and one of the world’s leading professional services organisations. We provide audit, tax and advisory services to individuals, SMEs, multi‑nationals and government agencies.

Locally, we’re known for our values‑driven culture and strong staff engagement, anchored in our purpose of fuelling New Zealand’s prosperity. This purpose drives everything we do, from our client work to internal practises, all guided by our shared values of Integrity, Courage, Excellence, Together, for Better.

The opportunity

As a Senior Systems Engineer – End User Computing (EUC) in KPMG's Technology Operations team, you'll engineer fixes, not just flag risks. Working with Security Operations, Platform Engineering and Service Delivery, you'll reduce vulnerability exposure, improve platform health and support our modern workplace and cloud platforms.

Day to day you will

Endpoint Engineering & Modern Workplace

• Design, maintain and optimise endpoint platforms including Intune, Autopilot, MECM, Group Policy and Microsoft Defender.
• Manage endpoint lifecycle activities (deployment, configuration, patching, application delivery) and provide L3 support.
• Troubleshoot OS, authentication, hardware, firmware and application issues.
• Contribute to endpoint modernisation, device compliance and security posture.
• Maintain technical standards and runbooks.

Vulnerability Remediation & Platform Security

• Investigate, assess and remediate vulnerabilities found via Qualys, Microsoft Defender and Security Operations.
• Coordinate remediation with platform, application and engineering owners, then validate outcomes through testing and reporting.
• Execute patch deployment, application upgrades, configuration changes and other mitigation activities.
• Drive vulnerability reduction through automation and continuous process improvement.

Azure & Platform Engineering

• Support Azure-hosted infrastructure and platform services, including vulnerability remediation, patching and configuration management.
• Assist with Azure administration and lifecycle management alongside the Platform Engineering team.

What you will bring to our team

• 5+ years of hands-on experience managing enterprise endpoint environments (Intune, Autopilot, MECM, Windows, Group Policy, Active Directory, Microsoft Defender) with strong vulnerability remediation and application/update management skills.
• Excellent troubleshooting and problem-solving skills.
• Application packaging / PowerShell scripting experience.
• Experience implementing automation to streamline operations and improve efficiency.
• Experience with Microsoft Azure IaaS (VMs/Updates/Backups/Networking) beneficial.
• Experience applying industry best practice security frameworks and attack surface reduction.
• Excellent written and verbal communication, with a collaborative approach across Security Operations, Service Desk, Engineering and business stakeholders.
• A proactive mindset focused on continuous improvement.

Preferred certifications

• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• ITIL 4 Foundation