Windows Endpoint Infrastructure Engineer

As a Windows Endpoint Infrastructure Engineer, you will be part of a global, cross-disciplined Agile team, working towards DevOps best practices within the Endpoint Security function.

You will play a key role in designing, engineering, and operating endpoint security solutions across large-scale enterprise environments, both on-prem and in the cloud.

About the Team

The mission of the Enterprise Security team is to implement the Firm's Cybersecurity Strategy by architecting, engineering, deploying, and operating robust technical security controls across the enterprise. We achieve this through strong architectural rigor, automation, Agile delivery, and close collaboration with our users and partners.

The Endpoint Security Team designs, engineers, and operates solutions that protect desktops, laptops, Servers, and cloud resources from malicious internal and external threats. We provide preventative, detective, and hardening controls while enabling Real Time endpoint detection and response capabilities. As our security footprint expands into Azure and AWS, this is an exciting opportunity to join a growing team delivering critical security controls for the firm.

Key Responsibilities

• Work as part of a global Agile team delivering endpoint security solutions
• Design, engineer, and support security controls from proof of concept through to production
• Operate and enhance endpoint protection, detection, and response capabilities
• Continuously improve solution quality through peer reviews, retrospectives, and refactoring
• Troubleshoot complex Windows enterprise environments
• Contribute to automation and operational efficiency across endpoint platforms

• Extensive years of hands-on experience in enterprise IT Infra/Security environments
• Strong knowledge of Windows endpoint internals in environments with 50,000+ endpoints
• Hands-on experience with troubleshooting/Debugging skills in complex Windows environments
• Proven experience designing and engineering solutions end-to-end
• Experience with automation and Scripting (eg PowerShell, Python)
• Strong analytical, problem-solving, communication, and organisational skills
• A genuine interest in learning and working with cybersecurity technologies

Desirable Skills

• Experience with Microsoft Defender for Endpoint (ATP) and the Microsoft E5 security suite
• Experience with disk encryption and operating system hardening
• Exposure to Defender for Cloud Apps
• Experience with Splunk, SCCM, and/or Intune
• Experience working in DevOps or SRE-aligned teams
• Broad troubleshooting across hardware, OS, network, and storage
• Platform design, build, deployment, and continual service improvement experience
• Experience working in Agile environments
• Unix and macOS system administration experience (beneficial)

Why Join?

• Work on enterprise-scale security challenges with real-world impact
• Join a growing team shaping endpoint and cloud security strategy
• Collaborate globally in a modern Agile/DevOps environment
• Opportunity to expand your skills across endpoint, cloud, and security platforms