IT Systems Engineer – End User Compute

Jobtailor; Cheadle; On-site; GBP 45,000 - 65,000; Full time

Job summary

UK Biobank is seeking an End User Compute Engineer to develop and support a modern, cross‑platform environment across Windows, macOS, iOS, and Android. You will work with Infrastructure, Networking and Security to enable Zero Trust access and migrate device management toward Intune and Entra ID.

You will deploy endpoint applications, secure remote access, and support Microsoft 365 and various VDI environments. Security baselines and policies will be implemented to protect endpoints.

Qualifications

• Strong knowledge supporting Windows 10/11 and macOS/iOS/Android devices.
• Experience managing Windows RDS/VDI (Azure WVD/AWS) advantageous.
• Knowledge of ISO/NIST/CIS security standards in secure environments.
• Operational experience supporting end user devices in a multi-site organisation.
• Experience managing device identities and configurations with AD/Entra ID/Intune/Autopilot/policy profiles.

Responsibilities

• Develop and support End User Compute environments across Windows, macOS, iOS, and Android.
• Collaborate with Infrastructure, Networking, and Information Security to enable a modern, Zero Trust end user environment.
• Evolve device management toward Microsoft Intune and Entra ID.
• Support endpoint application deployment via Intune, Company Portal, Patch My PC, Win32 packaging, and related tooling.
• Facilitate secure access to internal services using Microsoft Entra Application Proxy and Global Secure Access.
• Support Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop and AWS EC2/WorkSpaces environments.
• Enhance security by implementing security baselines, compliance policies, security updates, and endpoint protection.

Skills

Windows support

MacOS/iOS/Android support

VDI/Remote Desktop Services

Security standards (ISO/NIST/CIS)

Device identity & configuration (Intun

Job description

Overview

Developing and supporting UK Biobank's End User Compute environment across Windows, macOS, iOS, and Android devices. Working closely with Infrastructure, Networking, and Information Security teams to deliver a modern, Zero Trust end user environment. Driving the evolution from traditional device management to Microsoft Intune and Entra ID. Supporting endpoint application deployment through Microsoft Intune, Company Portal, Patch My PC, Win32 app packaging and related tooling. Supporting secure access to internal services through Microsoft Entra Application Proxy and Global Secure Access. Supporting Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop and AWS EC2/WorkSpaces environments. Strengthening the security by implementing security baselines, compliance policies, security updates, endpoint protection.

Responsibilities

• Developing and supporting End User Compute environments across Windows, macOS, iOS, and Android devices.
• Collaborating with Infrastructure, Networking, and Information Security teams to enable a modern, Zero Trust end user environment.
• Evolving device management from traditional methods to Microsoft Intune and Entra ID.
• Supporting endpoint application deployment via Microsoft Intune, Company Portal, Patch My PC, Win32 app packaging, and related tooling.
• Facilitating secure access to internal services using Microsoft Entra Application Proxy and Global Secure Access.
• Supporting Microsoft 365 end-user services, Windows Remote Desktop Services, Windows 365, Azure Virtual Desktop, and AWS EC2/WorkSpaces environments.
• Enhancing security by implementing security baselines, compliance policies, security updates, and endpoint protection.

Qualifications

• Strong knowledge and experience supporting Microsoft Windows 10 & 11, together with Apple macOS, iOS, and Android devices.
• Experience managing Windows Remote Desktop Services, with knowledge of Windows 365, Azure Virtual Desktop, or AWS Virtual Desktop environments being advantageous.
• Knowledge of security standards, frameworks, and best practices, including ISO, NIST, and CIS, with experience working within secure or ISO 27001-aligned environments being advantageous.
• Operational experience supporting end user devices, applications, and services within a complex, multi-site organisation.
• Experience managing device identities and configuration using Microsoft Active Directory, Microsoft Entra ID, Group Policy, Microsoft Intune, Windows Autopilot, compliance policies and configuration profiles.