End User Platform Engineer

Tokio Marine HCC International; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Tokio Marine HCC is seeking an experienced Endpoint Engineer to identify underlying causes of vulnerabilities and deliver scalable fixes. You will prioritise risk using Qualys data, design automated remediation with PowerShell, and manage deployments via SCCM/MECM while ensuring endpoint health and security compliance.

You will work closely with End User Platform and Security teams, communicate technical risk to stakeholders, and operate within a hybrid office environment in London.

Qualifications

• Experience in Endpoint Engineering, Desktop Engineering or advanced 2nd line support in a large enterprise.
• Strong experience supporting Windows 11 enterprise environments.
• Demonstrable vulnerability management, risk-based prioritisation and remediation.
• SCCM/MECM knowledge including packaging, deployment, patching and reporting.
• Strong PowerShell skills for automation and remediation scripts.
• Good Active Directory, Group Policy and Microsoft 365 experience.
• Excellent stakeholder management and clear written communication.

Responsibilities

• Own investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse Qualys findings and translate results into technical actions.
• Design sustainable fixes to remove root causes and reduce repeats.
• Create, test and deploy enterprise packages and security updates via SCCM/MECM.
• Develop PowerShell automation for detection, remediation and health checks.
• Troubleshoot SCCM/MECM client health and deployment status.
• Collaborate with End User Platform and Security teams on remediation strategy.

Skills

Endpoint Eng

Windows 11

SCCM/MECM

PowerShell

Vulnerability Mgmt

Stakeholder Mgmt

Active Directory

Change Mgmt

Tools

SCCM/MECM

Group Policy

Microsoft 365

Citrix

Job description

Hybrid, minimum 3 days in the office per week

Why Tokio Marine HCC?

Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

About Operations

Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen.

Operations is made up of 7 functions, this role sits within: IT

We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact.

Job Purpose

An experienced endpoint engineer responsible for identifying the underlying causes of vulnerabilities, non-compliance and remediation failure across the TMHCC workstation estate. The role will design, test and deliver scalable fixes rather than rely on repeated manual intervention.

The EUP Engineer will use Qualys and other approved security data to prioritise risk, then apply strong packaging, SCCM/MECM, PowerShell and endpoint engineering skills to deliver controlled remediation. The role will improve deployment quality, endpoint health and operational efficiency by creating repeatable processes, automation and clear technical standards.

Direct business interaction is a key part of this role. The postholder will communicate technical risk and remediation plans clearly, manage stakeholder expectations and ensure agreed Service Level Agreements, quality thresholds and change controls are maintained.

The Service Desk operates on a shift pattern between 08:00 and 18:00, Monday to Friday.

Key Responsibilities

• Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse and prioritise findings from Qualys and other approved security platforms, considering technical impact, business risk and remediation feasibility.
• Perform structured root cause analysis for vulnerabilities, failed deployments, recurring non-compliance and endpoint health issues.
• Design sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.
• Create, test, peer review and deploy enterprise application packages, security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.
• Develop and maintain PowerShell automation for detection, remediation, validation, reporting and operational health checks.
• Troubleshoot SCCM/MECM client health, software distribution, content delivery, deployment status and patch installation failures.
• Use controlled pilot groups, technical validation and rollback planning to reduce deployment risk.
• Work with the End User Platform and Security teams to agree remediation strategy, technical ownership and delivery priorities.
• Recommend improvements to packaging standards, deployment controls, vulnerability workflows, reporting and endpoint engineering processes.
• Drive automation opportunities that improve remediation speed, consistency, evidence quality and operational efficiency.
• Identify recurring failure patterns and convert findings into permanent engineering actions, technical debt items or platform improvements.
• Produce clear technical documentation, remediation records, runbooks, knowledge articles and audit evidence.
• Provide accurate progress, risk and dependency updates for vulnerability, compliance and service reporting.
• Support remediation across physical workstations, laptops and Citrix virtual desktop environments.
• Lead complex endpoint problem investigations and provide senior technical guidance to support colleagues.
• Apply ITIL best practice across Incident, Request, Problem and Change management activities.
• Perform system administration and advanced troubleshooting within Windows, Active Directory, Group Policy and Microsoft 365 environments.
• Ensure solutions comply with TMHCC security policies, technical standards, controls and agreed service levels.
• Contribute to endpoint strategy and initiatives that improve security, reliability and the digital employee experience.
• Drive initiatives to improve endpoint reliability, security and digital employee experience.
• Improve application, patch and security configuration deployment success across the managed estate.
• Reduce repeat vulnerabilities and failed remediation through effective root cause analysis and permanent fixes.
• Increase operational efficiency through automation, reusable packaging standards and repeatable processes.
• Improve SCCM/MECM client health, endpoint compliance and the quality of technical reporting and evidence.
• Deliver clear recommendations that lead to measurable improvements in current End User Technology processes.
• Deliver strong customer service while supporting wider 2nd line operational priorities.

Skills And Experience Specification

• Experience in Endpoint Engineering, Desktop Engineering, Endpoint Management or advanced 2nd line support within a medium or large enterprise environment.
• Strong experience supporting and engineering Windows 11 enterprise environments.
• Demonstrable experience in vulnerability management, risk-based prioritisation and endpoint remediation.
• Strong Microsoft SCCM/MECM knowledge, including application packaging, software distribution, patching, collections, deployments, reporting and client troubleshooting.
• Strong application packaging and deployment experience, including testing, detection methods, dependencies, supersedence and rollback planning.
• Strong PowerShell skills with the ability to design, test, troubleshoot and maintain production-ready automation and remediation scripts.
• Experience analysing Qualys findings, or comparable vulnerability management data, and translating results into technical action.
• Good experience of Active Directory, Group Policy, Microsoft 365 and related endpoint technologies.
• Strong understanding of endpoint security, patch management, configuration compliance and change control principles.
• Advanced troubleshooting, analytical thinking and root cause investigation skills.
• Experience improving technical processes, defining standards and recommending practical engineering changes.
• Excellent stakeholder management, written communication and the ability to work independently across technical teams.

What We Offer

The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful, dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals.

The Tokio Marine HCC Group of Companies is an equal opportunity employer. Please visit www.tmhcc.com for more information about our companies.