End User Platform Engineer

Job summary

The End User Platform Engineer investigates and resolves vulnerabilities, compliance gaps, and remediation failures across an enterprise workstation estate, delivering scalable fixes that improve endpoint security, reliability, and operational efficiency. The role prioritises Qualys findings and engineers controlled application, patch, and configuration deployments using Microsoft SCCM/MECM and PowerShell, while supporting Windows 11, Active Directory, Group Policy, Microsoft 365, and Citrix environments.

Benefits

Qualifications

• Experience in endpoint engineering, desktop engineering, endpoint management, or advanced second-line support in a medium or large enterprise.
• Strong experience supporting and engineering Windows 11 enterprise environments.
• Demonstrable experience in vulnerability management, risk prioritisation, and endpoint remediation.
• Strong SCCM/MECM knowledge, including packaging, software distribution, patching, collections, deployments, reporting, and client troubleshooting.
• Application packaging and deployment experience, including testing, detection methods, dependencies, supersedence, and rollback planning.
• Strong PowerShell skills for designing, testing, troubleshooting, and maintaining production automation and remediation scripts.
• Experience analysing Qualys or comparable vulnerability management findings and translating them into technical actions.
• Experience with Active Directory, Group Policy, Microsoft 365, and related endpoint technologies.
• Understanding of endpoint security, patch management, configuration compliance, and change control.
• Strong analytical, troubleshooting, and root cause investigation skills.
• Ability to improve technical processes, define standards, communicate clearly, and work independently across technical teams.

Responsibilities

• Investigate and remediate complex endpoint vulnerabilities across the workstation estate.
• Analyse and prioritise vulnerability findings based on technical impact, business risk, and remediation feasibility.
• Perform root cause analysis for vulnerabilities, failed deployments, recurring non-compliance, and endpoint health issues.
• Design sustainable fixes that address underlying causes and reduce manual remediation.
• Create, test, peer review, and deploy application packages, security updates, and configuration changes using SCCM/MECM.
• Develop and maintain PowerShell automation for detection, remediation, validation, reporting, and endpoint health checks.
• Troubleshoot SCCM/MECM client health, software distribution, deployment status, and patch installation failures.
• Use pilot groups, technical validation, and rollback plans to manage deployment risk.
• Coordinate remediation strategy and priorities with End User Platform and Security teams.
• Document remediation, runbooks, technical standards, and audit evidence; report progress, risks, and dependencies.
• Support remediation across workstations, laptops, and Citrix virtual desktop environments.
• Lead complex endpoint investigations and provide technical guidance to support colleagues.
• Apply ITIL practices to incident, request, problem, and change management.
• Contribute to endpoint improvements in security, reliability, compliance, and employee experience.

Skills

Work schedule

Industry

Relocation