IT Systems Engineer - End User Compute

Overview

Developing and supporting UK Biobank’s End User Compute environment across Windows, macOS, iOS, and Android devices. Working closely with Infrastructure, Networking, and Information Security teams to deliver a modern, Zero Trust end user environment. Driving the evolution from traditional device management to Microsoft Intune and Entra ID. Supporting endpoint application deployment through Microsoft Intune, Company Portal, Patch My PC, Win32 app packaging and related tooling. Supporting secure access to internal services through Microsoft Entra Application Proxy and Global Secure Access. Supporting Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop and AWS EC2/WorkSpaces environments. Strengthening the security by implementing security baselines, compliance policies, security updates, endpoint protection.

Responsibilities

• Developing and supporting End User Compute environments across Windows, macOS, iOS, and Android devices.
• Collaborating with Infrastructure, Networking, and Information Security teams to enable a modern, Zero Trust end user environment.
• Evolving device management from traditional methods to Microsoft Intune and Entra ID.
• Supporting endpoint application deployment via Microsoft Intune, Company Portal, Patch My PC, Win32 app packaging, and related tooling.
• Facilitating secure access to internal services using Microsoft Entra Application Proxy and Global Secure Access.
• Supporting Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop, and AWS EC2/WorkSpaces environments.
• Enhancing security by implementing security baselines, compliance policies, security updates, and endpoint protection.

Qualifications

• Strong knowledge and experience supporting Microsoft Windows 10 & 11, together with Apple macOS, iOS, and Android devices.
• Experience managing Windows Remote Desktop Services, with knowledge of Windows 365, Azure Virtual Desktop, or AWS Virtual Desktop environments being advantageous.
• Knowledge of security standards, frameworks, and best practices, including ISO, NIST, and CIS, with experience working within secure or ISO 27001-aligned environments being advantageous.
• Operational experience supporting end user devices, applications, and services within a complex, multi-site organisation.
• Experience managing device identities and configuration using Microsoft Active Directory, Microsoft Entra ID, Group Policy, Microsoft Intune, Windows Autopilot, compliance policies and configuration profiles.

• Strong knowledge and experience supporting Microsoft Windows 10 & 11, together with Apple macOS, iOS, and Android devices.
• Experience managing Windows Remote Desktop Services, with knowledge of Windows 365, Azure Virtual Desktop, or AWS Virtual Desktop environments being advantageous.
• Knowledge of security standards, frameworks, and best practices, including ISO, NIST, and CIS, with experience working within secure or ISO 27001-aligned environments being advantageous.
• Operational experience supporting end user devices, applications, and services within a complex, multi-site organisation.
• Experience managing device identities and configuration using Microsoft Active Directory, Microsoft Entra ID, Group Policy, Microsoft Intune, Windows Autopilot, compliance policies and configuration profiles.