Modern Workplace Engineer

Management Level

G

Role Overview

We are seeking an experienced Endpoint Engineer with a strong focus on enterprise application packaging, deployment engineering, and modern device management. The successful candidate will be responsible for packaging, testing, and deploying enterprise applications across a large-scale Windows environment, while maintaining operating system deployment solutions using Microsoft Configuration Manager (SCCM) and Microsoft Intune.

This role requires expertise across the modern endpoint management stack, including Application Packaging, Windows Build Engineering, Autopilot, Intune, PowerShell automation, and endpoint security. The successful candidate will play a key role in delivering reliable, secure, and user-focused endpoint solutions while supporting our transition towards cloud-native device management.

Key Responsibilities

Application Packaging & Deployment

• Package, test, and deploy enterprise applications using industry-standard packaging and deployment methodologies.
• Create and maintain deployment packages using PowerShell, PSAppDeployToolkit (PSADT), InstallShield, and Patch My PC.
• Develop and manage silent installations, MST transforms, response files, custom installation scripts, detection methods, dependencies, supersedence, and deployment requirements.
• Perform application compatibility testing, user acceptance testing, and deployment validation.
• Analyse deployment feedback and implement improvements to application delivery processes.
• Maintain packaging standards, documentation, and best practices.

• Support and maintain Microsoft Configuration Manager (SCCM) Operating System Deployment task sequences.
• Develop, support, and optimise Windows 11 enterprise builds and deployment processes.
• Maintain automated BIOS, driver, and firmware update solutions using Dell and HP enterprise tooling.
• Design, implement, and maintain Windows Autopilot provisioning and deployment processes.
• Configure and optimise the Windows Out-of-Box Experience (OOBE).
• Integrate security baselines, compliance requirements, and corporate standards into operating system builds.
• Optimise build performance, provisioning workflows, and deployment success rates.
• Support modern device provisioning and lifecycle management initiatives.

• Support the design, implementation, and ongoing management of Microsoft Intune.
• Package, deploy, and manage applications through Microsoft Intune.
• Develop, test, and maintain PowerShell automation and remediation scripts.
• Configure and maintain device compliance, configuration profiles, application deployments, and endpoint security policies.
• Assist with migration initiatives from on-premises management technologies to cloud-native solutions.
• Support Microsoft Entra ID, Microsoft Defender, and other Microsoft 365 endpoint management technologies.
• Evaluate and implement emerging technologies that enhance endpoint management capabilities.
• Troubleshoot endpoint-related issues and drive production incidents through to resolution.

• Contribute to continuous improvement initiatives across endpoint engineering and device management services.
• Create and maintain high-quality technical documentation, standards, and operational procedures.
• Support knowledge sharing and provide mentoring to junior engineers.
• Maintain current technical certifications and stay updated with emerging Microsoft technologies and industry trends.

• Significant experience in Application Packaging, Endpoint Engineering, or Modern Workplace Engineering within a large enterprise environment.
• Strong hands-on experience packaging applications for Intune and SCCM.
• Expert knowledge of Windows application deployment technologies and packaging methodologies.
• Strong understanding of:
• Win32 applications
• Microsoft Store applications
• MSI/MSIX packaging
• Detection methods
• Requirement rules
• Supersedence
• Experience supporting Windows Autopilot deployment and provisioning solutions.
• Strong knowledge of SCCM Operating System Deployment and Task Sequences.
• PowerShell scripting skills for automation and application deployment.
• Expert knowledge of Windows 11 administration and troubleshooting.
• Strong understanding of:
• Microsoft Intune
• Microsoft Entra ID
• Active Directory
• Microsoft 365
• Microsoft Defender
• Azure services
• Experience managing BIOS, firmware, and driver update solutions.
• Strong understanding of the Windows Registry and operating system configuration.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Understanding of ITIL principles and service management practices.
• Strong written and verbal communication skills with the ability to engage technical and non-technical stakeholders.

• MD-102 Endpoint Administrator Associate certification.
• AZ-104 Azure Administrator Associate certification.
• Experience with Patch My PC or similar packaging technologies.
• Experience with Jamf, macOS management or other mobile device management platforms.
• Experience with Zscaler.
• Knowledge of CIS Benchmarks and security hardening frameworks.
• Experience supporting cloud-first and modern workplace transformation programmes.
• Experience within Financial Services, Pensions, or regulated industries.

We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships. Please note any offer of employment is subject to satisfactory pre-employment screening checks.