End User Computing Engineer (Microsoft365)

Ivy Rock Partners; Bircham Newton; On-site; GBP 45,000 - 47,000; Full time

Job summary

A public sector IT company seeks an End User Computing Engineer (Microsoft365) to manage and optimize end-user computing environments. The role involves extensive work with Microsoft 365, Azure, and Intune, including responsibilities like image building, Group Policy management, and security applications. Candidates should have significant experience in a Microsoft environment and familiarity with mobile device management and endpoint security solutions. This is a 2-year fixed-term contract based in Bircham Newton.

Qualifications

• Extensive experience with Microsoft 365, Azure, and Intune.
• Advanced knowledge of Group Policy management in Active Directory.
• Proven experience in Windows image creation and security hardening.

Responsibilities

• Manage and optimize end-user computing environments within a Microsoft-centric ecosystem.
• Administer Microsoft Endpoint Manager for device management.
• Configure and manage Microsoft Intune and security policies.

Skills

Microsoft 365

Azure

Intune

Group Policy Management

Windows image creation

Mobile Device Management

PowerShell Scripting

Tools

Microsoft Deployment Toolkit (MDT)

SCCM

Azure Virtual Desktop (AVD)

Microsoft Defender for Endpoint

Job description

End User Computing Engineer (Microsoft365)

£45K-£47K - 5 days per week from Bircham Newton office - 2 year fixed-term contract

Our Norfolk based Public Sector client have an immediate requirement for an End User Computing Engineer (Microsoft365) to join

This role focuses on managing and optimizing end-user computing environments within a Microsoft-centric ecosystem, ensuring secure, efficient, and well-managed desktop and mobile device experiences across the organization.

The role will be focussing on the following areas:

Microsoft Cloud Stack Management

• Design, implement, and maintain Microsoft 365 services including Azure AD, Intune, and Exchange Online
• Manage Azure Virtual Desktop (AVD) environments and Windows 365 cloud PC deployments
• Administer Microsoft Endpoint Manager for device management and compliance
• Configure and optimize SharePoint Online and OneDrive for Business integration

Image Build and System Hardening

• Create and maintain standardized Windows desktop and laptop images using Microsoft Deployment Toolkit (MDT) or SCCM
• Implement security hardening standards aligned with CIS benchmarks and organizational security policies
• Develop and maintain automated deployment processes for operating system installations
• Configure and manage Windows Update for Business and patch management strategies

Group Policy Administration

• Design, implement, and maintain Active Directory Group Policy Objects (GPOs)
• Troubleshoot Group Policy application issues and optimize policy processing
• Document Group Policy configurations and maintain policy inheritance structures
• Integrate cloud-based policies with on‑premises Group Policy management

Mobile Device Management (MDM)

• Configure and manage Microsoft Intune for iOS, Android, and Windows device enrolment
• Develop device compliance policies and conditional access rules
• Implement application management policies including MAM and app protection
• Support BYOD initiatives while maintaining security and compliance standards

Local Antivirus Support

• Deploy, configure, and maintain Microsoft Defender for Endpoint across the enterprise
• Manage antivirus policy configurations and threat response procedures
• Coordinate with security teams on malware incidents and remediation
• Monitor and report on endpoint security posture and compliance metrics

General End User Computing

• Provide technical support for desktop, laptop, and mobile device issues
• Collaborate with help desk teams on escalated technical problems
• Maintain inventory and life cycle management of end user computing assets
• Support remote work technologies and VPN connectivity solutions

Key experience and skills required for the End User Computing Engineer (Microsoft365)

• Microsoft Cloud Stack: Extensive experience with Microsoft 365, Azure, Intune, and Azure Active Directory
• Group Policy Management: Advanced knowledge of Group Policy creation, management, and troubleshooting in Active Directory environments
• Image Building & Hardening: Proven experience in Windows image creation, customization, and security hardening using industry best practices
• MDM Solutions: Hands‑on experience with Mobile Device Management platforms, particularly Microsoft Intune
• Antivirus & Security: Experience with endpoint protection solutions, local antivirus management, and security baseline implementation
• Experience with enterprise‑scale deployments (1000+ endpoints)
• Knowledge of compliance frameworks (CE+, ISO 27001, NIST)
• Familiarity with third‑party endpoint management tools
• Experience with Windows Autopilot and modern provisioning methods
• Understanding of zero‑trust security models
• Previous experience in regulated industries (healthcare, finance, government)
• Proficiency in PowerShell Scripting and automation
• Knowledge of Windows 10/11 deployment and management
• Understanding of networking concepts and protocols
• Experience with virtualization technologies (VMware, Hyper‑V)
• Familiarity with SCCM/MECM for software distribution and patch management