End User Computing Specialist

Campari Group today is a major player in the global branded spirits industry, with a portfolio of over 50 premium and super premium brands, marketed and distributed in over 190 markets around the world, with leading positions in Europe and the Americas.

Headquartered in Milan, Italy, Campari Group owns 25 plants worldwide and has its own distribution network in 26 countries, and employs approximately 4,700 people.

Shares of the parent company Davide Campari - Milano N.V. are listed on the Italian Stock Exchange since 2001. Campari Group is today the sixth-largest player worldwide in the premium spirits industry.

Role Overview

The Global IT Sr Specialist Endpoint Service is responsible for ensuring Campari continues to modernise its End User Computing (EUC) environment, keeping the established endpoint service model current, scalable and aligned with evolving Microsoft capabilities. This includes endpoint lifecycle management, device compliance, security baselines, automation, software deployment and user experience optimisation across Windows, macOS and mobile platforms.

The role centres on global service ownership. This is a technical service ownership role: the successful candidate combines strong technical expertise across endpoint management, Windows platforms, virtual desktop technologies, device security and workplace infrastructure with the ability to direct the partners who deliver the build. As the senior specialist in the Endpoint pillar of Digital Workplace, you will drive an automation-first approach across the platform on Microsoft Intune, Windows Autopilot, Windows 365 Cloud PC and Azure Virtual Desktop (AVD), so it operates reliably, securely and consistently across all markets. As its service owner, you will set the standards, roadmap and performance measures, and direct the managed service partners and application packaging partner who deliver them.
You will work closely with local IT (country and regional IT managers and their teams), so that what is designed centrally works in practice for every site and every Camparista.

Key Responsibilities

Service Ownership and Operations

• Own endpoint services globally: quality, standards, roadmap (aligned to the EUC Architect's target architecture), support model and performance against agreed service levels.
• Plan device and operating system lifecycle: hardware standards, refresh cycles and the retirement of legacy platforms.
• Run the monthly patch quality gate: updates reach the wider business only after nominated application owners have tested and signed them off
• Manage recurring issues through problem management, lead technically in major incidents, and hand new services into operation with agreed support models.

Supplier Management

• Set the technical direction for managed service partners, the packaging partner and technology vendors, and challenge their recommendations on standards and value.
• Lead service reviews on SLAs and KPIs with local IT feedback, and hold suppliers to account for incidents, improvements and delivery.
• Give the line manager, Vendor Management and Procurement technical input and performance evidence on contracts and statements of work.

Endpoint Platform Ownership

• Own the Microsoft Intune configuration and policy estate (settings catalogue, compliance policies, security baselines and Windows LAPS), implementing designs set by the EUC Architect. Build is delivered mainly through the managed service partner, with the role keeping the technical capability to build, automate and validate configuration directly where needed.
• Ensure the end-to-end Windows Autopilot provisioning process is completed successfully across all markets, owning the zero-touch provisioning standards and driving automation so new and reset devices are ready for work with minimal hands-on effort.
• Ensure the endpoint estate is patched and compliant across Windows, macOS, iOS and Android, owning the update standards for Windows Autopatch (including hotpatch) and Intune.
• Translate the EUC Architect's agreed designs into build requirements for the managed service partner, validate what is delivered, lead endpoint projects such as the Cloud PC and AVD rollout, and act as the senior technical escalation point.

Application Packaging and Deployment

• Own application packaging and deployment through Intune and Juriba: catalogue first for standard applications, and Win32 packaging with PSADT where needed.
• Direct the application packaging partner day to day: set standards, triage requests and accept packages only when they pass agreed quality checks.
• Ensure the application library and install and detection logic are maintained, with a named owner for every application.

Automation and Continuous Improvement

• Drive automation of repeatable endpoint tasks with PowerShell and the Microsoft Graph API, building directly where this is faster or beyond the partner's scope, to reduce manual work in the admin portals.
• Define and prioritise self-healing fixes (Intune remediations) for common faults, and measure their effect on incidents and repeat contacts.
• Manage Intune configuration as code where it adds value: version-controlled, backed up and checked for unapproved changes.
• Use Endpoint analytics, device health data, surveys and ticket trends to fix problems before users report them, starting with the sites with the poorest experience.
• Make practical use of AI-assisted tools for scripting, troubleshooting and documentation, validating the output before it reaches production.

Endpoint Security and Compliance

• Define endpoint security baselines with Cyber Security, and apply them consistently in Intune across all markets.
• Own the standards and coverage for Microsoft Defender for Endpoint onboarding, BitLocker, Windows Hello for Business and passwordless sign-in.
• Work with the Identity team on device compliance and Conditional Access, which Identity approves, so only healthy devices reach company data.
• Track compliance and vulnerability remediation, follow up with suppliers and local IT, and provide audit evidence, keeping controls workable for users.

Local IT Partnership and Demand

• Act as Global IT's main endpoint contact for local IT, running a regular forum on the roadmap, changes, service performance and local needs.
• Reflect how offices, plants, distilleries, warehouses and field teams use their devices, involving local IT early in design, pilots and staged rollouts.
• Release significant changes with communications, guides, go-live support and a rollback plan, and agree a clear split of responsibilities with local IT and suppliers.
• Assess requests against standards, security, supportability, cost and capacity. Where a request cannot be met, explain why and agree a workable alternative.
• Agree time-limited exceptions with documented risk acceptance, review them regularly, and escalate unresolved disagreements with options and a recommendation.

Key Stakeholders

• Internal: Technology and Cyber, IT governance, local IT teams, application owners.
• External: service partners, external vendors

Measures of Success

Within the first 12 months, success looks like this:

• Zero-touch provisioning is the standard for new and reset Windows devices, with high first-time success for Autopilot and Cloud PC.
• At least 60% of the application estate is auto-managed through Juriba, all applications are delivered from the catalogue, and partner packages meet the agreed quality checks and turnaround times.
• Automation and self-healing measurably reduce recurring incidents and manual effort.
• Every monthly patch cycle completes on schedule with full application owner sign-off, and compliance against security baselines stays high.
• Services meet agreed SLAs at global and market level, user satisfaction rises, and local IT rate releases as well prepared.
• Suppliers deliver improvement plans on time, and exceptions stay time-limited and reviewed.

Experience & Qualifications

Must have

• 7+ years in End User Computing, including at least 3 years in a service owner or supplier-facing role in a multinational environment.
• Proven direction of outsourced suppliers against SLAs and KPIs across several countries, applying ITIL practices and using ServiceNow or a similar tool.
• Proven design and operation of Microsoft Intune, Windows Autopilot and Windows 11 at multinational scale, including compliance and Windows Autopatch, with Windows 365 Cloud PC or AVD experience.
• Working PowerShell and Microsoft Graph API ability: able to review, adapt and write automation where needed.
• Sound understanding of Win32 application packaging and Intune deployment, sufficient to set standards and quality-check partner output.
• Good working knowledge of Microsoft Entra ID, Conditional Access, Defender for Endpoint and BitLocker.
• Fluent English, written and spoken.

Nice to have

• Microsoft certifications such as Endpoint Administrator (MD-102), Microsoft 365 Administrator or Azure Virtual Desktop Specialty.
• Configuration as code with Git and Azure DevOps pipelines.
• Migration from Configuration Manager (SCCM) to cloud-native management.
• Depth in macOS management through Intune, or digital employee experience tools and XLAs.
• Italian or another European language.

Skills & Behaviours

• Automation first: automates the repeatable task and fixes the fault for good, rather than fixing the same thing twice.
• Continuous learning: tests new capabilities, including AI-assisted tools, and turns the useful ones into everyday practice.
• Operational discipline: documents, tests and controls changes so the platform stays reliable and others can support it.
• Influence and communication: builds trust across cultures, explains decisions in plain language, and says no constructively with a workable alternative.
• Ownership and business focus: follows issues through to resolution, judges success by whether services work for users, and holds partners to account fairly.

Additional Requirements

• Up to 10% international travel.

Our commitment to Diversity & Inclusion:

At Campari Group we believe in building more value together, thus we see diversity in all forms as a source of enrichment. Our employment policies and practices ensure that we are committed to providing equal employment opportunities in all aspects of employment without regard to any individual’s race, religion, creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex, sexual orientation, gender identity or characteristics or expression, political affiliation or activity, age, veteran status, citizenship, or any other characteristic protected by law.

Campari Group believes that fair compensation and equal opportunities are crucial for employees’ well-being, empowerment, and engagement.  Our efforts to ensure fair pay have earned us the Fair Pay Certification by Fair Pay Workplace, an independent organization dedicated to dismantling pay disparities based on gender, race and their intersection.

Note to applicants:

Your application will be assessed based on your abilities, expertise, general knowledge and experience, not because of any confidential, proprietary or trade secret information you may possess. You must not disclose to Campari Group any such information. In the event that you are asked a question that cannot be answered without disclosure of any confidential, proprietary or trade secret information (including from a current or prior employer or their vendors or customers), you must decline to answer the question.

Notice to third party agencies:

Please refrain from cold-calling or emailing our executive leadership team or the HR community directly. The Talent Acquisition department manages centralized recruiting operations globally, including the selection and management of external suppliers. Currently, our preferred supplier list is at full capacity. To ensure we have your information on file for future consideration, we kindly request that you complete the online form provided here.