Build & Imaging Support

PowerShell scripting and .NET programming (VB.NET, C#) for build automation, endpoint management, and the development of reusable script libraries.

Windows OS image engineering using Windows ADK and DISM, covering online and offline patching, driver integration, component management, application removal, and export to enterprise-ready WIM files.

WIM file and Windows Image Management, including version control and maintenance of image libraries across multiple OS editions.

Windows PE customisation, including the creation and maintenance of boot media and boot keys with current driver sets and .NET integration.

MECM Task Sequence design and ongoing maintenance for both bare-metal and in-place upgrade deployment scenarios.

MECM content distribution management, including working knowledge of Adaptiva peer-to-peer distribution and Distributed File System (DFS).

BIOS and firmware management, including integration of update mechanisms within automated build and deployment workflows.

Advanced build and application troubleshooting using tools such as CMTrace and log analysis to diagnose and resolve deployment and installation failures.

Driver management across build and post-build stages, including sourcing, testing, packaging, and integration into deployment pipelines.

Windows Start Menu, shell, and user experience configuration, including policy-based enforcement of standardised look and feel across OS versions.

Knowledge & Experience

Proven 3rd or 4th line experience within a large enterprise endpoint engineering or workplace technology function, with demonstrable ownership of build and deployment processes.

A global mindset with the ability to balance regional requirements against enterprise-wide standards, and to assess the broader impact of build and deployment decisions on end user experience, security posture, and business continuity across distributed environments.

Deep working knowledge of MECM across application packaging, OS deployment, collection management, content distribution, Task Sequence engineering, and OS lifecycle management, with experience extended to Intune for modern management scenarios.

Strong working knowledge of MDT, including integration with MECM for hybrid deployment scenarios and familiarity with community frameworks such as OneVinn.

Experience designing and maintaining enterprise Windows OS builds, including preparing new OS versions for corporate readiness, removing consumer features, and aligning with security and compliance baselines.

Experience with Windows OS offline updating strategies, including the integration of cumulative updates, security patches, and .NET components into WIM images prior to deployment.

Familiarity with modern device provisioning approaches including Windows Autopilot and cloud-native or co-managed models, with the ability to contribute to the transition away from traditional imaging towards modern management.

Understanding of endpoint security hardening within the build process, including security baseline configuration, BitLocker enablement, and compliance policy alignment at the point of provisioning.

Experience owning technical documentation, build runbooks, and knowledge base articles to support operational consistency and team capability.

Strong collaborative and communication skills, with experience working across infrastructure, security, and application teams to resolve complex issues and drive continuous improvement across the device lifecycle.

Strong analytical and troubleshooting capability across the full deployment stack, from hardware and firmware through to application delivery and post-deployment configuration.