Senior End User Computing Windows Desktop Engineer

Job details

As a Senior End User Computing (EUC) Engineer, you will provide Level 3 engineering, automation and operational support across the department's end-user computing platforms and services. This role has a strong focus on engineering, automation and service modernisation through Azure DevOps, Azure Pipelines, Microsoft Purview Information Protection (MPIP) and PowerShell.

This recruitment round is specifically seeking candidates with strong, recent and hands-on experience in Azure DevOps, Azure Pipelines and Microsoft Purview Information Protection. These capabilities are critical to the team's current and future delivery objectives and will be assessed as priority requirements throughout the recruitment process.

You will work closely with technical teams and stakeholders across the department to deliver secure and reliable end-user services, improve operational efficiency through automation, and provide expert technical advice on supported platforms and technologies. The role requires a high degree of technical expertise, initiative and problem-solving capability, together with strong communication and stakeholder engagement skills.

Key duties and responsibilities

• Independently design, engineer, maintain and provide Level 3 support for complex end-user computing platforms, including the SOE, corporate devices, productivity services and remote access.
  
• Develop and support automation, deployment pipelines and configuration-as-code solutions using Azure DevOps, Azure Pipelines, Git and PowerShell, including automated deployment of Microsoft Purview Information Protection controls.
  
• Plan and implement upgrades, migrations, application deployments, patching and service changes across non-production and production environments.
  
• Monitor application, endpoint, platform and end-to-end service health, capacity and performance; proactively identify issues, diagnose root causes and implement sustainable remediation.
  
• Apply independent technical judgement to produce designs, evaluate options, manage technical risks and resolve complex issues.
  
• Work collaboratively with other technical teams, vendors, and Level 1 and Level 2 support staff to deliver changes, resolve incidents and improve support outcomes.
  
• Produce and maintain technical designs, implementation and test plans, operational procedures and support documentation, and uplift team knowledge through guidance, knowledge transfer and technical support where required.
  

The role responsibilities broadly apply to the following:

• Endpoint and Standard Operating Environment: Windows 11, Windows Server components supporting EUC services, Microsoft Intune, Microsoft Configuration Manager, Group Policy, Windows Autopilot, iOS and iPadOS device management, Apple Business Manager, BitLocker, Microsoft Defender for Endpoint, Microsoft Defender XDR and related monitoring and management tools.
  
• Application Control, Hardening and Essential 8 controls: Microsoft Defender, application whitelisting and execution control technologies, attack surface reduction (ASR) rules, Microsoft Office macro security controls and implementation of ACSC and vendor hardening guides for operating systems and applications.
  
• Azure Virtual Desktop and remote access: Azure Virtual Desktop host pools and published applications, Azure Monitor and Log Analytics, FSLogix, and enterprise VPN services.
  
• DevOps, automation and configuration as code: Azure DevOps, Azure Pipelines, PowerShell, and deployment automation across non-production and production environments.
  
• Information protection and compliance: Microsoft Purview Information Protection, sensitivity labels, label policies and Data Loss Prevention configurations.
  
• Productivity, messaging and collaboration: Microsoft 365 Apps for enterprise, Exchange Server, Exchange Online, Microsoft Teams, OneDrive for Business and associated administrative services.
  
• Application and patch management: application packaging and deployment technologies, Microsoft Intune, Microsoft Configuration Manager, Patch My PC, Windows Update services, Microsoft 365 Apps servicing channels, vulnerability remediation, and patch governance aligned to Essential 8 and organisational security requirements.