End User Platform Engineer

HCC Service Co. UK Branch; England; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Equal opportunity employer

Job summary

Tokio Marine HCC – A&H Group is seeking an End User Platform Engineer to lead remediation of endpoint vulnerabilities and to design scalable fixes. You will use Qualys data and SCCM/MECM tooling to deploy secure configurations while collaborating with IT security and platform teams.

The role focuses on automation with PowerShell, endpoint health improvements and documentation. A hybrid work arrangement is available, with in-office days required.

Qualifications

• Experience in Endpoint Engineering or Desktop Engineering in a large enterprise.
• Strong experience supporting Windows 11 enterprise environments.
• Proven vulnerability management and remediation skills.
• Expertise with SCCM/MECM packaging, deployments and troubleshooting.
• Strong PowerShell scripting for automation and remediation.
• Experience translating Qualys findings into actionable remediation steps.

Responsibilities

• Own endpoint vulnerability investigation and remediation across the workstation estate.
• Prioritize findings from Qualys, assess impact and remediation feasibility.
• Design sustainable fixes to remove root causes and reduce manual remediation.
• Develop and maintain PowerShell automation for detection and reporting.
• Collaborate with End User Platform and Security teams on remediation strategy.
• Ensure compliance with security policies and change controls.
• Produce clear technical documentation and audit evidence.

Skills

Endpoint Engineering

Windows 11

Vulnerability Management

PowerShell

Active Directory

Tools

SCCM/MECM

Microsoft 365

Group Policy

Job description

Job Title: End User Platform Engineer Reporting to: End User Technology Lead Direct Reports: None Hybrid, minimum 3 days in the office per week

Why Tokio Marine HCC?

Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

About Operations

Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen. Operations is made up of 7 functions, this role sits within: IT We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact.

Job Purpose

An experienced endpoint engineer responsible for identifying the underlying causes of vulnerabilities, non-compliance and remediation failure across the TMHCC workstation estate. The role will design, test and deliver scalable fixes rather than rely on repeated manual intervention. The EUP Engineer will use Qualys and other approved security data to prioritise risk, then apply strong packaging, SCCM/MECM, PowerShell and endpoint engineering skills to deliver controlled remediation. The role will improve deployment quality, endpoint health and operational efficiency by creating repeatable processes, automation and clear technical standards. Direct business interaction is a key part of this role. The postholder will communicate technical risk and remediation plans clearly, manage stakeholder expectations and ensure agreed Service Level Agreements, quality thresholds and change controls are maintained. The Service Desk operates on a shift pattern between 08:00 and 18:00, Monday to Friday.

Key Responsibilities

• Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse and prioritise findings from Qualys and other approved security platforms, considering technical impact, business risk and remediation feasibility.
• Perform structured root cause analysis for vulnerabilities, failed deployments, recurring non-compliance and endpoint health issues.
• Design sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.
• Create, test, peer review and deploy enterprise application packages, security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.
• Develop and maintain PowerShell automation for detection, remediation, validation, reporting and operational health checks.
• Troubleshoot SCCM/MECM client health, software distribution, content delivery, deployment status and patch installation failures.
• Use controlled pilot groups, technical validation and rollback planning to reduce deployment risk.
• Work with the End User Platform and Security teams to agree remediation strategy, technical ownership and delivery priorities.
• Recommend improvements to packaging standards, deployment controls, vulnerability workflows, reporting and endpoint engineering processes.
• Drive automation opportunities that improve remediation speed, consistency, evidence quality and operational efficiency.
• Identify recurring failure patterns and convert findings into permanent engineering actions, technical debt items or platform improvements.
• Produce clear technical documentation, remediation records, runbooks, knowledge articles and audit evidence.
• Provide accurate progress, risk and dependency updates for vulnerability, compliance and service reporting.
• Support remediation across physical workstations, laptops and Citrix virtual desktop environments.
• Lead complex endpoint problem investigations and provide senior technical guidance to support colleagues.
• Apply ITIL best practice across Incident, Request, Problem and Change management activities.
• Perform system administration and advanced troubleshooting within Windows, Active Directory, Group Policy and Microsoft 365 environments.
• Ensure solutions comply with TMHCC security policies, technical standards, controls and agreed service levels.
• Contribute to endpoint strategy and initiatives that improve security, reliability and the digital employee experience.
• Drive initiatives to improve endpoint reliability, security and digital employee experience.
• Improve application, patch and security configuration deployment success across the managed estate.
• Reduce repeat vulnerabilities and failed remediation through effective root cause analysis and permanent fixes.
• Increase operational efficiency through automation, reusable packaging standards and repeatable processes.
• Improve SCCM/MECM client health, endpoint compliance and the quality of technical reporting and evidence.
• Deliver clear recommendations that lead to measurable improvements in current End User Technology processes.
• Deliver strong customer service while supporting wider 2nd line operational priorities.

Skills and Experience Specification

• Experience in Endpoint Engineering, Desktop Engineering, Endpoint Management or advanced 2nd line support within a medium or large enterprise environment.
• Strong experience supporting and engineering Windows 11 enterprise environments.
• Demonstrable experience in vulnerability management, risk-based prioritisation and endpoint remediation.
• Strong Microsoft SCCM/MECM knowledge, including application packaging, software distribution, patching, collections, deployments, reporting and client troubleshooting.
• Strong application packaging and deployment experience, including testing, detection methods, dependencies, supersedence and rollback planning.
• Strong PowerShell skills with the ability to design, test, troubleshoot and maintain production-ready automation and remediation scripts.
• Experience analysing Qualys findings, or comparable vulnerability management data, and translating results into technical action.
• Good experience of Active Directory, Group Policy, Microsoft 365 and related endpoint technologies.
• Strong understanding of endpoint security, patch management, configuration compliance and change control principles.
• Advanced troubleshooting, analytical thinking and root cause investigation skills.
• Experience improving technical processes, defining standards and recommending practical engineering changes.
• Excellent stakeholder management, written communication and the ability to work independently across technical teams.

What We Offer

The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful, dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals. The Tokio Marine HCC Group of Companies is an equal opportunity employer. Please visit www.tmhcc.com for more information about our companies. Your success is our priority. In a world that is rapidly changing, TMHCC enables you to take on opportunities with confidence. At Tokio Marine HCC, we pride ourselves on hiring the smartest, most conscientious people, who want to make a difference no matter their background. And then we give them the support and trust they need. We’re always looking for curious, creative transformative thinkers who want to change the status quo and have a passion for doing the right thing.

If this is you, then we want you on our team.