> Markdown version of [/jobs/ext/3840149-end-point-build-engineer](https://www.wearedevelopers.com/jobs/ext/3840149-end-point-build-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# End Point Build Engineer

- **Company:** ECS
- **Location:** Englefield, UK
- **Experience:** Experienced
- **Salary:** £62,400.0
- **Contract:** Temporary contract
- **Skills:** Microsoft Access, Microsoft Windows, BitLocker Drive Encryption, Microsoft Outlook, Configuration Management Databases, Firmware, Microsoft Office, Microsoft Software, Windows API, Windows PowerShell, Role-Based Access Control, Scripting, Microsoft InTune, SC Clearance, Deployment Automation, CIS Benchmarks, Servicenow
- **Published:** October 20, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5934126527

## About the Role

* Typically 3 years of experience across Service Desk, desktop support, application support or End User Compute, including hands-on Level 1/Level 2 troubleshooting.
 * Strong working knowledge of Windows 10/11, Microsoft 365, Teams, Outlook, OneDrive, identity and access, and endpoint support.
 * Experience with ITSM tools, incident and request management, queue control, priority handling, and SLA-driven support.
 * Ability to troubleshoot independently, gather evidence, and escalate with clear technical detail.
 * Experience coaching or mentoring less-experienced analysts and improving team quality.
 * Strong communication and customer ownership, including confidence working with senior or demanding users.
 * Live SC clearance is stated as essential; the posting also says candidates must hold, or be eligible and willing to obtain and maintain, the required clearance.
 * Desirable: Typically 5 years of experience across endpoint engineering, Modern Device Management, EUC, or Microsoft workplace technologies.
 * Desirable: Practical experience with Microsoft Intune, Windows Autopilot, Entra ID, and Windows 10/11 endpoint management.
 * Desirable: PowerShell capability and experience automating device builds, reporting, or remediation.
 * Desirable: Experience packaging and deploying applications using Win32, MSIX, scripts, or comparable enterprise methods.
 * Desirable: Understanding of endpoint security controls, including Defender, BitLocker, Conditional Access, configuration and compliance policies, and least privilege.
 * Desirable: Experience with technical testing, change control, documentation, and production handover.
 * Desirable: Relevant Microsoft 365 or Endpoint Administrator certification.
 * Desirable: Experience with ServiceNow CMDB, asset management, or device lifecycle processes.
 * Desirable: Knowledge of application compatibility, driver and firmware management, and deployment rings.
 * Desirable: Experience engineering endpoints in Government, defence, or another regulated environment.

## Description

* Own and improve the technical build, provisioning, and software-distribution capability for Windows end-user devices on a Government project.
 * Use Intune, Autopilot, Entra ID, and related Microsoft technologies to deliver secure, repeatable, supportable device builds, with an emphasis on automation, testing, and lifecycle control.
 * Maintain and improve the Windows endpoint build standard, including Intune configuration, Autopilot profiles, compliance policies, and approved security baselines.
 * Build, enrol, configure, and validate devices for new starters, refreshes, replacements, and other provisioning needs.
 * Package, test, and distribute approved applications using suitable modern deployment methods and scripting where required.
 * Maintain persona-based application and configuration assignments and support controlled changes through pilot and deployment rings.
 * Troubleshoot complex provisioning, enrolment, application-deployment, policy, and compliance issues.
 * Use PowerShell and automation to reduce manual build effort, improve consistency, and support approved zero-touch provisioning.
 * Work with Tech Bar, Service Desk, Security, ServiceNow, and application teams to maintain accurate asset and configuration records and ensure smooth handover into support.
 * Maintain technical documentation, build procedures, test evidence, rollback plans, and operational knowledge.
 * Support lifecycle activity, including new hardware models, firmware and driver changes, refresh planning, and controlled retirement of obsolete build components.

Technologies:

 * CMDB
 * Firmware
 * Hardware
 * Support
 * ITSM
 * LESS
 * Microsoft 365
 * Microsoft Intune
 * PowerShell
 * Security
 * ServiceNow
 * Windows
 * Office 365, We are recruiting an End Point Build Engineer for a contract role supporting a secure UK Government project in Reading. The contract is expected to run for three to six months, with a rate of £240 per day inside IR35. We are working with a longstanding client that has operated in the sector for 30 years and has built a reputation for quality and service. Working arrangements will reflect the needs of the secure service. ECS Recruitment Group Ltd is acting as an Employment Business for this vacancy.