Endpoint Platform Engineer: Automation & Remediation

Tokio Marine HCC – A&H Group; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Competitive salary

Job summary

Tokio Marine HCC – A&H Group is seeking an experienced End User Platform Engineer to identify and remediate vulnerabilities across the workstation estate. You will prioritise risk using Qualys data, design scalable fixes, and implement automated packaging and deployment through SCCM/MECM.

The role requires strong PowerShell automation, expertise in Windows 11 environments, and collaboration with security teams to meet SLAs and change controls. Hybrid work with regular office presence is offered.

Qualifications

• Experience in Endpoint Engineering and remediation in a large enterprise.
• Strong PowerShell automation for production-ready solutions.
• Proven vulnerability management, risk-based prioritisation and remediation capabilities.

Responsibilities

• Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Design, test, and deploy enterprise packaging and security updates via SCCM/MECM and related tooling.
• Develop automation for detection, remediation, validation, and reporting; improve endpoint health and deployment reliability.
• Collaborate with End User Platform and Security teams to align remediation strategy and delivery priorities.

Skills

Endpoint Engineering

Desktop Engineering

Endpoint Management

Windows 11

Vulnerability Management

Tools

SCCM/MECM

PowerShell

Active Directory

Group Policy

Job description

Tokio Marine HCC – A&H Group is seeking an experienced End User Platform Engineer to identify and remediate vulnerabilities across the workstation estate. You will prioritise risk using Qualys data, design scalable fixes, and implement automated packaging and deployment through SCCM/MECM.

The role requires strong PowerShell automation, expertise in Windows 11 environments, and collaboration with security teams to meet SLAs and change controls. Hybrid work with regular office presence is offered.