SOE Engineer

HCLTech - Australia and New Zealand; City of Melbourne; On-site; AUD 120,000 - 150,000; Full time

Job summary

HCLTech Australia is seeking an experienced SOE Engineer to design, deploy, and maintain a secure Standard Operating Environment across workplace devices. You will manage Intune, Config Manager, and deployment tooling, ensuring rapid, secure provisioning and ongoing automation.

You will collaborate with Workplace Technology Services, Cyber Security, and Infrastructure to optimize endpoint security, patching, and automation, delivering reliable, modern user experiences.

Qualifications

• Demonstrated experience engineering and supporting enterprise Standard Operating Environments (SOE).
• Strong experience administering Microsoft Intune, Configuration Manager, Windows Autopilot, and Entra.
• Experience creating Windows images and deployment solutions.
• Experience packaging and deploying enterprise applications.
• Knowledge of Windows 10/11 and Microsoft 365, security controls, and patching.
• Advanced PowerShell scripting and automation skills.
• Excellent communication and stakeholder engagement.

Responsibilities

• Design, develop, implement, and maintain the organisation's SOE for workplace devices.
• Develop and maintain Windows OS images and deployment standards.
• Evaluate and implement new endpoint technologies and features.
• Ensure SOE remains secure and compliant with standards.
• Administer endpoint management platforms (Intune, Config Manager, Entra).
• Create device configuration profiles and deployment strategies.
• Provide Level 3 support for complex endpoint issues and participate in major incidents.
• Document engineering standards, runbooks, and deployment procedures.

Skills

PowerShell scripting

Automation

Troubleshooting

Communication

DevOps practices

Zero Trust security

Endpoint engineering

Education

Bachelor's degree in IT/CS

Tools

Intune

Configuration Manager

Windows Autopilot

Microsoft Entra

Defender for Endpoint

Defender XDR

Azure Virtual Desktop

macOS/iOS management

PowerShell

Job description

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 219,000+ people across 54 countries, supercharging progress through industry-leading capabilities centered around Digital, Engineering and Cloud.

The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis. We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be.

At HCLTech Australia, we value the unique perspective and contributions of all individual and we actively encourage applications from Aboriginal and Torres Strait Islander people to apply for this role.

Are you ready to be an important part of this ever-transformational journey?

Job Description: Standard Operating Environment (SOE) Engineer

Reports to the Windows and Mac Lead

Position Summary

The Standard Operating Environment (SOE) Engineer is responsible for the design, engineering, maintenance, and continual improvement of the organisation's workplace technology platform. The role develops and manages the Standard Operating Environment (SOE), endpoint management solutions, application packaging, device security, and deployment technologies to ensure employees are provided with secure, reliable, and modern workplace technology services.

Working closely with Workplace Technology Services, Infrastructure, Cyber Security, Networking, and Service Management teams, the SOE Engineer delivers endpoint engineering solutions that improve operational efficiency, strengthen security, and enhance the employee technology experience through automation, standardisation, and continual improvement.

Key Responsibilities

Standard Operating Environment Engineering

· Design, develop, implement, and maintain the organisation's Standard Operating Environment (SOE) for workplace technology devices.

· Develop and maintain Windows operating system images and deployment standards.

· Evaluate, test, and implement new endpoint technologies and operating system features.

· Ensure the SOE remains current, secure, and aligned with organisational technology standards.

· Administer and maintain endpoint management platforms including Microsoft Intune, Microsoft Endpoint Configuration Manager (Configuration Manager), Microsoft Entra, Windows Autopilot, and other enterprise endpoint management technologies.

· Develop and maintain device configuration profiles, compliance policies, and deployment strategies.

· Manage endpoint enrolment, provisioning, configuration, and lifecycle processes.

· Support modern device management initiatives and cloud-based endpoint management capabilities.

Application Packaging and Deployment

· Package, test, and deploy enterprise applications using approved deployment methodologies.

· Maintain application deployment standards and software distribution processes.

· Validate application compatibility across supported operating system versions.

· Support application lifecycle management, including upgrades, version control, and retirement.

Endpoint Security and Compliance

· Implement and maintain endpoint security controls in collaboration with Cyber Security teams.

· Configure and manage Group Policy Objects (GPOs), security baselines, compliance policies, and endpoint protection technologies.

· Manage operating system and application patching to ensure timely remediation of vulnerabilities.

· Ensure workplace technology platforms comply with organisational security standards, regulatory requirements, and industry best practices.

· Support vulnerability remediation and endpoint hardening initiatives.

Automation and Continuous Improvement

· Develop and maintain automation scripts using PowerShell and other scripting or automation technologies.

· Streamline provisioning, deployment, configuration, and administration processes through automation.

· Identify opportunities to improve endpoint management, operational efficiency, and employee technology experience.

· Contribute to the adoption of modern endpoint management and workplace technology capabilities.

Operational Support

· Provide Level 3 technical support for complex endpoint, operating system, application, and deployment issues.

· Participate in major incident response, root cause analysis, and problem management activities.

· Support technology rollout projects, operating system upgrades, and enterprise deployment initiatives.

· Work collaboratively with Workplace Technology Services to resolve escalated technical issues and improve support outcomes.

Documentation and Knowledge Management

· Develop and maintain technical documentation, engineering standards, build guides, deployment procedures, and operational runbooks.

· Maintain configuration standards and engineering documentation for endpoint platforms.

· Share technical knowledge with Workplace Technology Services and other Technology teams.

· Contribute to operational readiness and knowledge transfer activities.

Skills and Experience

Required

· Demonstrated experience engineering and supporting enterprise Standard Operating Environments (SOE).

· Strong experience administering Microsoft Intune, Microsoft Endpoint Configuration Manager (Configuration Manager), Windows Autopilot, and Microsoft Entra.

· Experience creating and maintaining Windows operating system images and deployment solutions.

· Experience packaging, deploying, and supporting enterprise applications.

· Strong knowledge of Microsoft Windows desktop operating systems and Microsoft 365.

· Experience configuring Group Policy, endpoint security controls, and device compliance policies.

· Advanced PowerShell scripting and automation skills.

· Strong troubleshooting and analytical problem-solving abilities.

· Excellent communication and stakeholder engagement skills.

· Experience with Microsoft Defender for Endpoint and Microsoft Defender XDR.

· Knowledge of Microsoft Azure Virtual Desktop or Windows 365.

· Experience managing Apple macOS and iOS devices through Microsoft Intune or equivalent platforms.

· Familiarity with scripting languages such as Python.

· Experience with infrastructure-as-code, automation frameworks, or DevOps practices.

· Knowledge of Zero Trust security principles and modern endpoint management practices.

Qualifications

· Bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent practical experience.

· Relevant Microsoft certifications in Endpoint Administration, Modern Desktop Administration, or Microsoft 365 are highly desirable.

· ITIL Foundation certification is desirable.

· Additional endpoint management, security, or automation certifications are advantageous.

· Endpoint engineering expertise

· Automation and scripting

· Technical problem solving

· Security and compliance focus

· Analytical thinking

· Planning and organisation

· Communication and stakeholder engagement

· Continuous improvement mindset

· Collaboration and teamwork

· Attention to detail

Working Conditions

· This role is primarily office-based with occasional on-site support for major technology deployments and project activities.

· Participation in planned after-hours maintenance windows, operating system deployments, and major technology rollouts may be required.

· Availability to support major incidents and critical service restoration activities may be required.

Success Measures

Success in this role is demonstrated through:

· Delivery of a secure, stable, and well-maintained Standard Operating Environment.

· High reliability and performance of endpoint management and deployment platforms.

· Successful delivery of operating system upgrades, application deployments, and technology refresh initiatives.

· High levels of endpoint compliance with organisational security and configuration standards.

· Increased operational efficiency through automation and standardisation.

· Reduction in endpoint-related incidents through proactive engineering and continual improvement.

· Effective collaboration with Workplace Technology Services, Infrastructure, Cyber Security, and Service Management teams.

Why Us

We are one of the fastest-growing large tech companies in the world, with offices in 50+ countries across the globe and 219,000 employees.

• Our company is extremely diverse with 165 nationalities represented.
• We offer the opportunity to work with colleagues across the globe.
• We offer a virtual-first work environment, promoting a good work-life integration and real flexibility.
• We offer comprehensive benefits for all employees.
• We are a certified great place to work and a top employer in 17 countries, offering a positive work environment that values employee recognition and respect.

Equality & Opportunity for All

Representing 165 nationalities across the globe, we pride ourselves on being an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, colour, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, Aboriginal and Torres Strait Islander people or any other protected classification, in accordance with federal, state, and/or local law.

Candidate Data Privacy Notice | HCL Technologies

We are committed to respecting your privacy and for the protection of your personal data. Your personal data will be collected and processed in line with our candidate privacy notice: https://www.hcltech.com/candidate-privacy-notice. This privacy notice will help you to understand what personal data we collect about you, how we use this personal data, and what rights you have regarding your personal data. By replying to this email or submitting any personal data to HCLTech, you acknowledge that you have read and understood the candidate privacy notice and have provided your consent to the processing of your data for recruitment purposes as described in the privacy notice”.