IT Systems Engineer - End User Compute
Role details
Job location
Tech stack
Job description
You'll be responsible for developing and supporting UK Biobank's End User Compute environment across Windows, macOS, iOS, and Android devices.
Working closely with Infrastructure, Networking, and Information Security teams, you'll help deliver a modern, Zero Trust end user environment that enables colleagues to work securely whether they're onsite or remote.
A key part of the role will involve driving the evolution from traditional device management to Microsoft Intune and Entra ID, helping improve device security, user experience, and operational efficiency.
Alongside day-to-day engineering, you'll contribute to UK Biobank's wider Data & Technology Transformation Programme, introducing new technologies, improving endpoint security, and supporting modern workplace initiatives across the organisation.
If you enjoy delivering technical solutions, solving complex infrastructure challenges, and working with the latest Microsoft technologies, this role offers a genuine opportunity to make an impact.
You will be responsible for:
- Managing, supporting and improving UK Biobank's End User Compute environment using Microsoft Intune, Windows Autopilot, PowerShell and Microsoft Entra ID, while helping reduce reliance on traditional Active Directory and Group Policy based device management where appropriate.
- Supporting endpoint application deployment through Microsoft Intune, Company Portal, Patch My PC, Win32 app packaging and related tooling.
- Supporting secure access to internal services through Microsoft Entra Application Proxy, Global Secure Access and related Zero Trust technologies, helping move away from traditional network or admin access patterns.
- Supporting Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop and AWS EC2/WorkSpaces environments as part of a secure and modern digital workplace.
- Strengthening the security of the End User Compute environment by implementing security baselines, CIS benchmark configurations, compliance policies, security updates, endpoint protection technologies,, and working closely with Information Security colleagues to continually improve security posture., Working hours are 35 hours per week, Monday to Friday, with 2 days onsite and hybrid working available. Based across Park Square and Manchester Science Park, this role offers the opportunity to collaborate closely with colleagues while supporting a modern, flexible working environment.
Our passion for diversity and equality means creating a work environment for all employees that is welcoming, respectful, engaging, and enriched with opportunities for personal and professional development.
Requirements
- Strong knowledge and experience supporting Microsoft Windows 10 & 11, together with Apple macOS, iOS, and Android devices.
- Experience managing Windows Remote Desktop Services, with knowledge of Windows 365, Azure Virtual Desktop, or AWS Virtual Desktop environments being advantageous.
- Knowledge of security standards, frameworks, and best practices, including ISO, NIST, and CIS, with experience working within secure or ISO 27001-aligned environments being advantageous.
- Operational experience supporting end user devices, applications, and services within a complex, multi-site organisation.
- Experience managing device identities and configuration using Microsoft Active Directory, Microsoft Entra ID, Group Policy, Microsoft Intune, Windows Autopilot, compliance policies and configuration profiles.
Benefits & conditions
️26 Days' Annual Leave - Plus Bank Holidays Holiday Buy Scheme Birthday Leave USS Pension Scheme Healthcare Cash Plan Enhanced Family Leave Cycle to Work Scheme Season Ticket Loan Professional Subscriptions Training & Development Opportunities ️ Free On-Site Gym ️Subsidised Canteen Lunches Free Car Parking ️Employee Discounts Portal Employee Assistance Programme Annual Flu Vaccination ️Life Assurance Cover