Infrastructure Engineer

We are looking for an experienced Infrastructure Engineer to own and secure our Omnissa Horizon (formerly VMware Horizon) virtual desktop platform, thin clients deployed across the UK, and managed laptops.

Security is a top priority. You will ensure the Horizon environment, thin clients and managed laptops are hardened, continuously monitored, and kept fully patched and compliant at all times. You will manage the full lifecycle of the Horizon platform while taking ownership of the national thin client estate and the security/patch posture of deployed managed laptops.

This is a hands-on, technical role requiring someone with solid proven experience. You will work closely with infrastructure, security and operations teams to deliver a stable, highly secure and well-maintained end-user computing estate. Regular travel to customer sites across the UK is expected., * Own the day-to-day management, monitoring, performance tuning, availability and security of the Omnissa Horizon VDI platform (Connection Servers, Unified Access Gateway, Instant Clones, desktop pools, App Volumes, Dynamic Environment Manager and related components).

• Design, build, maintain and secure gold images; manage application delivery and user environment configurations.
• Manage thin clients across all UK sites, including inventory, deployment, configuration, firmware/OS updates, Horizon client management, centralised policy enforcement, security hardening and patching.
• Manage the security and patch posture of deployed company-managed laptops (endpoint hardening, timely patching, security baselines, compliance and endpoint protection).
• Treat security as a non-negotiable priority: apply hardening standards, maintain rigorous and timely patch management across Horizon components, thin clients and laptops, monitor for vulnerabilities, and drive rapid remediation.
• Perform capacity planning, proactive performance optimisation and high-availability improvements for the Horizon platform.
• Provide Tier 2/3 support and root-cause analysis for complex VDI, thin client and managed laptop issues.
• Plan and execute upgrades, certificate management, security updates and patch cycles in line with organisational and regulatory standards.
• Maintain accurate documentation, runbooks, asset records and operational reporting for the Horizon estate, thin clients and managed laptops.
• Collaborate with security, infrastructure and audit teams to ensure continuous compliance and secure configuration across the entire endpoint and VDI landscape.

• Significant hands-on experience managing enterprise Omnissa Horizon / VMware Horizon VDI environments (Connection Servers, UAG, Instant Clones, App Volumes, DEM, desktop pools and image lifecycle).
• Proven experience managing thin client estates at scale (deployment, configuration, firmware/OS management, centralised policy and security controls) across multiple sites.
• Experience managing the security, patching and compliance of Windows managed laptops/endpoints in an enterprise environment.
• Strong track record of prioritising security: system hardening, reliable and timely patch management, vulnerability remediation and secure configuration of VDI and endpoint platforms.
• Solid working knowledge of VMware vSphere as the foundation for Horizon.
• Good understanding of Active Directory, Group Policy, authentication methods and networking fundamentals relevant to VDI and endpoints.
• Proven ability to troubleshoot complex end-to-end issues affecting virtual desktops, thin clients and managed laptops.
• Experience producing clear documentation and operational procedures.
• Security Clearance: Must hold current UK government security clearance at SC level minimum, with the willingness and ability to undergo Developed Vetting (DV).
• Right to work in the UK and ability to pass enhanced background checks.

Desirable Skills & Certifications

• Omnissa / VMware certifications (VCP-DTM or current Omnissa Horizon equivalents).
• Experience with specific thin client platforms and management tools (e.g. IGEL, Dell Wyse/ThinOS, 10Zig or similar).
• Endpoint management experience (Intune, SCCM/MECM, Workspace ONE or equivalent) with a strong focus on patching and security baselines.
• Familiarity with Horizon Cloud, multi-site architectures or advanced Horizon security features.
• Scripting/automation skills (PowerShell or similar) for image, thin client or endpoint tasks.
• Experience in regulated or high-security environments.

• Competitive salary and benefits package
• Opportunity to own and shape security for critical platforms
• Exposure to advanced on-premise and hybrid security technologies in a high-stakes environment