End User Platform Engineer – Automation & Endpoint Health

Tokio Marine HCC – A&H Group; England; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Equal opportunity employer

Job summary

Tokio Marine HCC – A&H Group is seeking an End User Platform Engineer to lead remediation of endpoint vulnerabilities and to design scalable fixes. You will use Qualys data and SCCM/MECM tooling to deploy secure configurations while collaborating with IT security and platform teams.

The role focuses on automation with PowerShell, endpoint health improvements and documentation. A hybrid work arrangement is available, with in-office days required.

Qualifications

• Experience in Endpoint Engineering or Desktop Engineering in a large enterprise.
• Strong experience supporting Windows 11 enterprise environments.
• Proven vulnerability management and remediation skills.
• Expertise with SCCM/MECM packaging, deployments and troubleshooting.
• Strong PowerShell scripting for automation and remediation.
• Experience translating Qualys findings into actionable remediation steps.

Responsibilities

• Own endpoint vulnerability investigation and remediation across the workstation estate.
• Prioritize findings from Qualys, assess impact and remediation feasibility.
• Design sustainable fixes to remove root causes and reduce manual remediation.
• Develop and maintain PowerShell automation for detection and reporting.
• Collaborate with End User Platform and Security teams on remediation strategy.
• Ensure compliance with security policies and change controls.
• Produce clear technical documentation and audit evidence.

Skills

Endpoint Engineering

Windows 11

Vulnerability Management

PowerShell

Active Directory

Tools

SCCM/MECM

Microsoft 365

Group Policy

Job description

Tokio Marine HCC – A&H Group is seeking an End User Platform Engineer to lead remediation of endpoint vulnerabilities and to design scalable fixes. You will use Qualys data and SCCM/MECM tooling to deploy secure configurations while collaborating with IT security and platform teams.

The role focuses on automation with PowerShell, endpoint health improvements and documentation. A hybrid work arrangement is available, with in-office days required.