EUC/Virtualisation Engineer - Citrix & Vulnerability Remediation

We are looking for an experienced Virtualisation Engineer to join a major technology and security improvement programme within a large financial services organisation.

The role will focus on the engineering, security and ongoing improvement of a large enterprise virtual desktop estate. Working closely with Vulnerability Management, Cyber Security and infrastructure teams, you will be responsible for assessing security findings and implementing the technical changes required to remediate vulnerabilities across the virtualisation environment., * Engineer, support and improve a large enterprise virtual desktop and virtualisation estate.

• Assess vulnerability and security findings and determine the appropriate technical remediation.
• Implement configuration, patching, hardening and security changes across the virtual desktop environment.
• Support Windows 11 and Windows Server 2019/2022/2025 environments.
• Engineer and maintain Citrix and non-persistent virtual desktop environments.
• Work closely with Vulnerability Management and Cyber Security teams to remediate identified risks.
• Remediate findings generated through vulnerability scanning, security assessments and Red Team activity.
• Troubleshoot complex virtualisation, desktop and Windows infrastructure issues.
• Deliver technical changes through established enterprise change and governance processes.
• Identify opportunities to automate and improve vulnerability-remediation processes.
• Help transition remediation from backlog-driven activity into an efficient and sustainable BAU process.

• Strong hands-on Virtualisation/EUC Engineering experience within large enterprise environments, proven experience working within Banking and FS is essential.
• Deep technical knowledge of Citrix Virtual Apps and Desktops (CVAD), including the engineering, configuration, maintenance and troubleshooting of enterprise Citrix environments.
• Strong experience engineering and supporting VDI and non-persistent virtual desktop environments, including management and maintenance of master/golden images.
• Strong Windows 11 desktop engineering experience, including OS configuration, security hardening, Group Policy and enterprise desktop management.
• Strong Windows Server 2019, 2022 and/or 2025 engineering and administration experience.
• Good technical knowledge of Microsoft 365 and its integration within enterprise virtual desktop environments.
• Experience implementing OS and application patching, security hardening and vulnerability remediation across Windows and virtual desktop estates.
• Ability to analyse vulnerability findings and translate them into appropriate infrastructure changes, configuration changes, patches or technical remediation.
• Experience remediating CVEs, security vulnerabilities, configuration weaknesses, unsupported/EOL software and security-control gaps within Windows/EUC environments.
• Experience working with vulnerability-management platforms such as Qualys, Tenable or similar, including interpreting scan results and supporting remediation through to validation and closure.
• Experience working with Cyber Security, Vulnerability Management, Penetration Testing or Red Team functions to remediate identified security risks.
• Strong knowledge of Active Directory, Group Policy and Entra ID within enterprise Windows environments.
• Experience with PowerShell Scripting and automation for administration, configuration, remediation or deployment activities.
• Understanding of enterprise security baselines and Windows/Citrix hardening standards.
• Experience troubleshooting complex Citrix, VDI, Windows desktop, application and user-session issues.
• Experience implementing infrastructure changes through formal change, release and production governance processes.
• Experience improving or automating vulnerability-remediation and patching processes would be highly desirable.