End User Platform Engineer — Automation & Remediation

Tokio Marine HCC International; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Tokio Marine HCC is seeking an experienced Endpoint Engineer to identify underlying causes of vulnerabilities and deliver scalable fixes. You will prioritise risk using Qualys data, design automated remediation with PowerShell, and manage deployments via SCCM/MECM while ensuring endpoint health and security compliance.

You will work closely with End User Platform and Security teams, communicate technical risk to stakeholders, and operate within a hybrid office environment in London.

Qualifications

• Experience in Endpoint Engineering, Desktop Engineering or advanced 2nd line support in a large enterprise.
• Strong experience supporting Windows 11 enterprise environments.
• Demonstrable vulnerability management, risk-based prioritisation and remediation.
• SCCM/MECM knowledge including packaging, deployment, patching and reporting.
• Strong PowerShell skills for automation and remediation scripts.
• Good Active Directory, Group Policy and Microsoft 365 experience.
• Excellent stakeholder management and clear written communication.

Responsibilities

• Own investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse Qualys findings and translate results into technical actions.
• Design sustainable fixes to remove root causes and reduce repeats.
• Create, test and deploy enterprise packages and security updates via SCCM/MECM.
• Develop PowerShell automation for detection, remediation and health checks.
• Troubleshoot SCCM/MECM client health and deployment status.
• Collaborate with End User Platform and Security teams on remediation strategy.

Skills

Endpoint Eng

Windows 11

SCCM/MECM

PowerShell

Vulnerability Mgmt

Stakeholder Mgmt

Active Directory

Change Mgmt

Tools

SCCM/MECM

Group Policy

Microsoft 365

Citrix

Job description

Tokio Marine HCC is seeking an experienced Endpoint Engineer to identify underlying causes of vulnerabilities and deliver scalable fixes. You will prioritise risk using Qualys data, design automated remediation with PowerShell, and manage deployments via SCCM/MECM while ensuring endpoint health and security compliance.

You will work closely with End User Platform and Security teams, communicate technical risk to stakeholders, and operate within a hybrid office environment in London.