End Point Build Engineer

ECS Resource Group; Reading; On-site; GBP 54,000 - 60,000; Full time

Job summary

ECS Resource Group is seeking an End Point Build Engineer to support a secure UK government project in Reading. The role requires live SC clearance and focuses on building and maintaining Windows endpoints using Intune, Autopilot, and security baselines.

Responsibilities include device provisioning for new starters, packaging and deploying applications, automation with PowerShell, and collaboration with Service Desk, Security, and IT teams to ensure smooth handover to support.

Qualifications

• 3+ years across Service Desk, desktop support, or End User Compute.
• Strong knowledge of Windows 10/11, Microsoft 365, Teams, Outlook, OneDrive, identity/access, and endpoint support.
• Experience with ITSM tools, incident management, queue control, priority handling and SLA-driven support.
• Ability to troubleshoot independently and elevate with clear technical detail.
• Experience coaching or mentoring less-experienced analysts and raising team quality.
• SC clearance is required. Candidates must hold or be willing to obtain and maintain the clearance.

Responsibilities

• Maintain and improve the Windows endpoint build standard, including Intune configuration, Autopilot profiles, compliance policies and approved security baselines.
• Build, enrol, configure and validate devices for new starters, refresh, replacement and other provisioning demand.
• Package, test and distribute approved applications using appropriate modern deployment methods and scripting where required.
• Maintain persona-based application and configuration assignments and support controlled changes through pilot and deployment rings.
• Troubleshoot complex provisioning, enrolment, application-deployment, policy and compliance issues.
• Use PowerShell and automation to reduce manual build effort, improve consistency and support zero-touch provisioning where approved.
• Work closely with Tech Bar, Service Desk, Security, ServiceNow and application teams to maintain accurate asset/configuration records and smooth handover into support.
• Maintain high-quality technical documentation, build procedures, test evidence, rollback plans and operational knowledge.
• Support lifecycle activity including new hardware models, firmware/driver changes, refresh planning and controlled retirement of obsolete build components.

Skills

Strong communication

Troubleshooting

Independent worker

Coaching/mentoring

Tools

PowerShell

Intune

Windows Autopilot

MSIX packaging

ServiceNow

Job description

End Point Build Engineer

Location: Reading

Rate: £240Per Day Inside IR35

Contract: Three - Six Months

SC Clearance is essential. Applicants without live SC Clearance will not be progressed

The Role

I am working with a longstanding client with whom we have completed numerous contract and project assignments over the last three years. After 30 years in the sector they have carved out a fantastic reputation for quality and providing the very best service to their clients.

They are now looking for an End Point Build Engineer to work with one of their clients on a contract basis. As previously stated, SC Clearance is essential for this role and I cannot accept any applications from candidates who do not have live SC Clearance.

Responsibilities

• Maintain and improve the Windows endpoint build standard, including Intune configuration, Autopilot profiles, compliance policies and approved security baselines.


• Build, enrol, configure and validate devices for new starters, refresh, replacement and other provisioning demand.


• Package, test and distribute approved applications using appropriate modern deployment methods and scripting where required.


• Maintain persona-based application and configuration assignments and support controlled changes through pilot and deployment rings.


• Troubleshoot complex provisioning, enrolment, application-deployment, policy and compliance issues.


• Use PowerShell and automation to reduce manual build effort, improve consistency and support zero-touch provisioning where approved.


• Work closely with Tech Bar, Service Desk, Security, ServiceNow and application teams to maintain accurate asset/configuration records and smooth handover into support.


• Maintain high-quality technical documentation, build procedures, test evidence, rollback plans and operational knowledge.


• Support lifecycle activity including new hardware models, firmware/driver changes, refresh planning and controlled retirement of obsolete build components.

Skills & Experience Required

• Typically 3+ years of experience across Service Desk, desktop support, application support or End User Compute, including hands-on L1/L2 troubleshooting.


• Strong working knowledge of Windows 10/11, Microsoft 365, Teams, Outlook, OneDrive, identity/access and endpoint support.


• Experience with ITSM tools, incident/request management, queue control, priority handling and SLA-driven support.


• Ability to troubleshoot independently, gather evidence and elevate with clear technical detail.


• Experience coaching or mentoring less-experienced analysts and raising team quality.


• Strong communication and customer ownership, including confidence with senior or demanding users.


• SC clearance is required. Candidates must hold, or be eligible and willing to obtain and maintain, the required clearance.

Desirable

• Typically 5+ years across endpoint engineering, Modern Device Management, EUC or Microsoft workplace technologies.


• Strong practical experience with Microsoft Intune, Windows Autopilot, Entra ID and Windows 10/11 endpoint management.


• Good PowerShell capability and experience automating device-build, reporting or remediation activity.


• Experience packaging and deploying applications using Win32, MSIX, scripts or comparable enterprise methods.


• Understanding of endpoint-security controls such as Defender, BitLocker, Conditional Access, configuration/compliance policy and least privilege.


• Experience with technical testing, change control, documentation and production handover.


• Relevant Microsoft 365 / Endpoint Administrator certification.


• Experience with ServiceNow CMDB, asset management or device lifecycle processes.


• Knowledge of application compatibility, driver/firmware management and deployment rings.


• Experience engineering endpoints in Government, defence or another regulated environment.

This role supports a secure UK Government project. SC clearance is a mandatory requirement and working arrangements will reflect the needs of the secure service.