Desktop Engineer

Stott and May Inc.; Greater London; Hybrid; GBP 42,000 - 56,000; Full time

Job summary

Our client, a global investment firm, seeks a Junior Desktop Engineer to join a small IT team supporting ~275 users across international offices. The role blends 2nd/3rd line support, endpoint engineering and admin tasks in a Microsoft/Azure‑centric environment with Intune, Azure Virtual Desktop and Okta.

You’ll work in a fast-paced setting, providing high-quality support to executives, traders and front-office staff while maintaining security, documentation and process discipline.

Qualifications

• 3-5 years' experience in IT support, desktop engineering or systems administration.
• Strong hands-on experience with Microsoft Intune, Microsoft 365 and Windows 10/11.
• Good working knowledge of Azure fundamentals (compute, networking, identity).
• Experience with Okta, Azure Virtual Desktop, CrowdStrike, Cato, Meraki, AppLocker, Rubrik or related tech.
• Strong PowerShell skills for scripting and automation.
• Solid networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN.
• Experience supporting senior stakeholders in a fast-paced environment.

Responsibilities

• Provide 2nd and 3rd line support across London and international offices.
• Deliver white-glove support to senior executives and front-office users.
• Support trading-floor and market-data environments, including Bloomberg issues.
• Own ticket triage, prioritisation and documentation with root-cause info.
• Triage Windows, M365, hardware, apps, networking and collaboration tech.
• Manage joiner/mover/leaver processes including Intune and Okta.
• Maintain asset records and support documentation.
• Support video conferencing, telephony and AV across the office.
• Administer Intune across Windows endpoints; manage Autopilot and policies.
• Own endpoint patching process monthly; manage Azure Virtual Desktop host pools.
• Support security technologies including CrowdStrike; automate with PowerShell.

Skills

2nd/3rd line support

Intune

Azure Virtual Desktop

Okta

CrowdStrike

Microsoft 365

PowerShell

Microsoft Graph

Endpoint security

Documentation

Tools

AppLocker

Meraki

Cato

Rubrik

Job description

Location: London (Hybrid – 4 days onsite)

Employment: Permanent

About the Role

Our client is a global investment management firm looking for a Junior Desktop Engineer to join a small, highly technical IT team supporting users across international offices. This is a hands‑on role combining 2nd and 3rd line support, endpoint engineering and systems administration. You will provide high‑quality technical support to approximately 275 users, including senior executives, portfolio managers, traders and other front‑office teams, while also taking ownership of key infrastructure and endpoint technologies.

The environment is modern and predominantly Microsoft and Azure‑focused, with a strong emphasis on Intune, Azure Virtual Desktop, Okta, CrowdStrike, Microsoft 365 and endpoint security. The successful candidate will be comfortable working in a fast‑paced environment where issues need to be resolved quickly, while maintaining a high level of attention to detail, security and documentation.

Key Responsibilities

End-User & Executive Support

• Provide 2nd and 3rd line technical support across London and wider international offices.
• Deliver a high-quality, white‑glove support service to senior executives, portfolio managers, traders and other front‑office users.
• Support trading‑floor and market‑data environments, including desktop and Bloomberg‑related issues.
• Own ticket triage, prioritisation and resolution, ensuring issues are properly documented and closed with appropriate root‑cause information.
• Troubleshoot Windows, Microsoft 365, hardware, applications, networking and collaboration technologies.
• Manage joiner, mover and leaver processes, including account provisioning, hardware, Intune, Okta and Microsoft 365.
• Maintain accurate asset records and support documentation.
• Provide support for video conferencing, telephony and AV technologies across the office.

Endpoint Engineering

• Administer and maintain Microsoft Intune across Windows 11 endpoints.
• Manage Autopilot, compliance policies, configuration profiles, application deployment and endpoint configuration.
• Support and maintain AppLocker policies.
• Own the monthly endpoint patching process, including testing, staging, deployment and reporting.
• Administer and support Azure Virtual Desktop environments, including host pools, images and user experience.
• Support endpoint security technologies including CrowdStrike.
• Use PowerShell and Microsoft Graph to automate repetitive tasks and improve operational efficiency.

Infrastructure & Cloud

• Support the wider infrastructure environment alongside senior engineers and technology partners.
• Work with Azure across areas including compute, networking, storage, monitoring and disaster recovery.
• Support Okta administration, including SSO, MFA, application integrations and lifecycle management.
• Assist with Cato SASE, Meraki networking and SecureW2.
• Support backup and recovery technologies, including monitoring, restores and recovery testing.
• Contribute to Microsoft 365 administration across Exchange Online, SharePoint, Teams, security and compliance.
• Participate in infrastructure projects, improvements and disaster recovery testing.

Security & Compliance

• Triage and investigate endpoint security alerts, including CrowdStrike detections.
• Support the implementation and enforcement of information security policies across endpoints and identity platforms.
• Administer security awareness and phishing programmes.
• Maintain appropriate documentation and evidence for audits, client due diligence and regulatory requirements.
• Follow change management, security and operational controls across all technical activities.
• Support office technology, AV, connectivity and physical infrastructure where required.
• Assist with office moves, hardware deployments and infrastructure changes.
• Work with MSPs, ISPs and technology vendors to resolve issues and deliver services effectively.
• Provide remote support to international offices and occasional travel where required.

Skills & Experience

• 3-5 years' experience in IT support, desktop engineering or systems administration.
• Strong hands‑on experience with Microsoft Intune, Microsoft 365 and Windows 10/11.
• Good working knowledge of Azure fundamentals, including compute, networking and identity.
• Experience with several of the following: Okta, Azure Virtual Desktop, CrowdStrike, Cato, Meraki, AppLocker, Rubrik or equivalent technologies.
• Strong PowerShell skills, including the ability to write, troubleshoot and improve scripts.
• Solid networking fundamentals covering TCP/IP, DNS, DHCP, VLANs, wireless and VPN.
• Experience supporting senior stakeholders and demanding users in a fast‑paced environment.
• Strong troubleshooting, analytical and problem‑solving skills.
• Excellent communication skills with both technical and non‑technical users.
• Financial services, investment management, asset management or buy‑side experience is highly desirable.

Personal Attributes

• Strong sense of ownership and accountability.
• Able to prioritise effectively and respond quickly to business‑critical issues.
• High attention to detail, particularly when making changes to production environments.
• Naturally curious and keen to develop deeper infrastructure and cloud expertise.
• Comfortable working independently while collaborating closely with a small technical team.
• Calm, professional and service‑focused when supporting senior stakeholders.
• Willing to investigate problems thoroughly rather than simply resolving the immediate symptom.
• Microsoft certifications such as MD-102 or AZ-104.
• Okta certification or equivalent identity‑management experience.
• Microsoft Graph, Python or other automation experience.
• Experience supporting Bloomberg or other market‑data platforms.
• Experience working within trading‑floor environments.
• Knowledge of structured cabling, AV systems or office infrastructure.
• Experience working with MSPs and third‑party technology providers.