Modern Workplace Engineer

Galliford Try Plc; Hinckley and Bosworth; On-site; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Generous holiday entitlement

Corporate discounts

Cycle to Work

Pension plan

Save as You Earn

Private medical

Professional association membership

Job summary

Galliford Try Plc is seeking a Senior Modern Workplace Engineer to lead and deliver advanced endpoint management across 9,000 devices. You’ll drive automation, strengthen identity security and optimise Microsoft investments in a cloud‑first environment.

You will shape the Modern Workplace strategy, provide hands‑on delivery, and mentor colleagues while advancing Zero Trust, Conditional Access and MFA across Windows, iOS and macOS endpoints.

Qualifications

• Senior expertise in Microsoft Intune at enterprise scale.
• Proven automation and process improvement in endpoint management.
• Experience with Zero Trust, MFA and conditional access.
• Deep knowledge of Entra ID and Windows Autopilot.
• Strong scripting and hands-on delivery capabilities.

Responsibilities

• Act as senior SME and design contributor for Modern Workplace, identity and endpoint security.
• Shape and deliver the technical roadmap and drive it forward.
• Apply best practices and challenge existing approaches.
• Set standards, governance and documentation for the team.
• Automate endpoint management and software deployment.
• Manage enterprise-scale estate using Intune, Windows 11 and iOS/macOS devices.
• Maintain configuration, compliance, and update rings; monitor health and remediation.

Skills

Intune expertise

Zero Trust

Conditional Access

Modern Authentication

PowerShell

Endpoint management

Entra ID

Tools

Apple Business Manager

Netskope

KQL

MECM Co-Management

Microsoft Teams Rooms

Job description

We are looking for a highly skilled Senior Modern Workplace Engineer to join our established Modern Workplace team. This is a senior technical position with responsibility for helping lead, support and continually improve an estate of approximately 9,000 Windows and iOS devices across the business. This role combines technical leadership with hands‑on delivery, offering the opportunity to modernise endpoint management, enhance identity and security controls, and maximise the value of our existing Microsoft technology investments. You will play a key role in shaping our Modern Workplace strategy, driving automation, improving user experience, and supporting the adoption of modern Microsoft capabilities. Reporting to the Modern Workplace Manager, you will act as a senior technical escalation point while helping define the future direction of our cloud‑first workplace environment. We are a cloud‑first organisation with a significant investment in Microsoft technologies and a clear ambition to continue evolving our digital workplace. You will join a highly capable team and be empowered to introduce new ideas, influence technical direction and drive meaningful improvements rather than simply maintain existing services.

Key initiatives

• Intelligent and automated endpoint management.
• Greater adoption of Microsoft 365 and Microsoft Copilot capabilities.
• Passwordless authentication and modern identity services.
• Zero Trust security and Conditional Access maturity.
• Cloud‑native endpoint management and digital employee experience improvements.

What You'll Be Doing

• Act as a senior SME and design contributor for Modern Workplace, identity and endpoint security.
• Help shape and deliver the technical roadmap - spot what good looks like, build the case for it, and drive it forward.
• Bring proven best practice to the table and challenge existing approaches where they can be improved.
• Help set standards, governance and documentation, and support colleagues across the team.
• Bring new ideas, tools and automation to modernise how we manage our endpoints, identifying the best approach where one doesn't yet exist.
• Introduce more proactive, vendor‑aware management of our laptop estate – including monitoring for issues and keeping devices current with the right drivers and firmware.
• Design and automate application packaging, deployment and patching so third‑party applications stay up to date with minimal manual effort, delivering a smoother, more reliable experience for our users.
• Manage and support an enterprise‑scale estate using Microsoft Intune, overseeing the lifecycle of Windows 11, iOS and iPadOS, Microsoft Teams Rooms and macOS devices (where applicable).
• Design, configure and maintain device configuration and security profiles, compliance policies, application deployment, and Windows Update / feature deployment rings.
• Monitor device health, compliance and remediation through Intune analytics and reporting.
• Act as senior technical escalation for complex endpoint issues, providing 3rd line support.
• Build deep, hands‑on knowledge of the capabilities we already own across Microsoft 365 and Copilot.
• Drive adoption of these tools, recommending where they can add value and improve the experience for our users.
• Contribute to governance, licensing and access discussions, and help evaluate and implement new Microsoft Modern Workplace capabilities.
• Design, mature and continuously improve Conditional Access policies based on device compliance, identity, risk and application sensitivity.
• Champion Zero Trust and Modern Authentication principles across the estate.
• Advance MFA, passwordless and device‑trust / compliance‑based access controls.
• Partner with Security to ensure endpoint and identity services meet internal and regulatory requirements, whilst always taking user experience into consideration.
• Manage corporate‑owned Apple devices using Microsoft Intune integrated with Apple Business Manager.
• Support the Apple Business Manager environment – device assignment and ownership, Automated Device Enrolment (ADE) integration, and application and license management.
• Administer and support Mobile Application Management (MAM) and App Protection Policies across iOS and Android.
• Configure mobile application deployment, app protection policies and secure access to corporate applications and data.
• Support device recovery, reassignment and redeployment, working alongside suppliers and resellers to maintain enrolment and governance.
• Deliver a consistent, secure and intuitive experience across managed and BYOD platforms.
• Maintain standards, technical documentation, processes and support runbooks.
• Ensure changes align with ITIL Incident, Change and Problem Management practices.
• Act as a technical SME within projects and transformation programmes.
• Support audits, compliance activities and security reviews relating to endpoint management, identity and access management.
  Strong, proven hands‑on experience with Microsoft Intune at enterprise scale.
• A track record of introducing automation and better processes to endpoint and application management.
• Deep expertise in Conditional Access, Modern Authentication and Zero Trust principles.
• Strong working knowledge of Microsoft Entra ID and Windows Autopilot.
• Experience managing Windows and iOS devices across a large estate.
• Microsoft Defender for Endpoint and device compliance / endpoint security experience.
• PowerShell scripting and automation.
• Excellent troubleshooting, communication and stakeholder engagement skills.
• Comfortable working within structured change and governance processes.

Desirable

• Experience of application packaging and third‑party patch automation tooling.
• Apple Business Manager; Netskope Secure Web Gateway and/or Private Access.
• MD-102 and/or ITIL certification; MECM Co‑Management; KQL.
• Experience managing macOS through Intune and supporting Microsoft Teams Rooms.

With an impressive order book of over £4.1 billion we are one of the industry's leading principal contractors, affording you the opportunity to work on some of the UK's most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we’re poised for further growth and success, so if you're committed, talented and enthusiastic, Galliford Try is the right place for you.

We are committed to maintaining the physical and mental wellbeing of all our people, through our 'Be Well' programme which offers discounts on certain products, advice and support for a range of issues. We invest in high‑quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential. Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged. Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office‑based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team., Galliford Try is one of the UK’s leading construction groups with a vision to continuously be a people‑orientated, progressive business, driven by our values to deliver lasting change for our stakeholders and the communities we work in. Our purpose is to improve people's lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work. We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long‑term value.

Benefits

• Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays
• A wide range of corporate discounts
• Cycle to Work schemes
• Comprehensive pension plan
• Regular Save as You Earn share purchase scheme
• Private medical scheme options are available for all salaried employees and our employee assistance programme also provides free 24/7 support to those who need it
• Paid for yearly membership to one recognised professional association relevant to your role