Multi Skilled Engineer - Endpoint & Windows Platform - Hampshire

PHET Enterprise Services (AP) Limited, Philippines Regional Operating Headquarters; Farnborough; On-site; GBP 80,000 - 110,000; Full time

Job summary

DXC Technology, a global enterprise technology partner, seeks a senior multiskilled engineer to design, deploy, and operate enterprise endpoint-management and Windows platforms across servers and clients.

You will lead RDS design, patch management with WSUS/SCCM/Ivanti, OS deployment, and automation using PowerShell and related tools; DV clearance required.

This on-site role requires five days a week and contributes to secure, compliant IT operations for government or contracted clients.

Qualifications

• Bachelor’s degree in IT, Computer Science, Engineering, or related field (or equivalent experience).
• Microsoft Certified credentials are desirable (e.g. Windows Server Hybrid Administrator/endpoint management).
• Ivanti product certification and ITIL Foundation are desirable.
• English proficiency to a high professional standard.

Responsibilities

• Windows Server management and RDS design, deployment, and maintenance across 2016/2019/2022/2025.
• Manage Remote Desktop Services including Session Host, Connection Broker, Gateway, Web Access, and Licensing.
• Administer and secure RDP, including certificates, encryption, and GPO controls.
• Administer SCCM/MECM hierarchy, policy enforcement, and software updates.
• Manage WSUS and Ivanti for patching and endpoint control.
• Monitor endpoint health, site backups, and disaster-recovery validation.
• Lead patch management and compliance using WSUS, ADRs, and Ivanti.
• Collaborate with IT Security on vulnerability remediation and policy alignment.
• Develop SQL queries and SSRS reports for inventory, compliance, and deployment KPIs.
• Lead root-cause analyses and mentor L1/L2 engineers; maintain CMDB/runbooks.

Skills

Windows OS

RDS management

PowerShell

Automation

SQL/SSRS

DV Clearance

English proficiency

Education

Bachelor’s degree in IT/CS/Engineering

Tools

SCCM/MECM

WSUS

Ivanti

AD/Group Policy

ADR (Automatic Deployment Rules)

PowerCLI

Ansible

PowerShell

SQL/SSRS

Job description

Job Description: Role Overview A senior, multiskilled engineer responsible for the design, deployment, optimisation, and day-to-day operation of enterprise endpoint-management and Windows platforms. The role spans Windows client and Server OS build and lifecycle, Remote Desktop Services (RDS) and RDP remote-access management, patch management and compliance (WSUS, SCCM/MECM, and Ivanti), software packaging and deployment, OS deployment (OSD), and supporting Windows Server and virtualisation environments. As a Level 10 specialist, the engineer provides advanced troubleshooting and strategic guidance, leads root-cause analysis for major incidents, drives automation, and mentor junior (L1/L2) team members — working within ITIL-aligned service delivery and corporate security standards. Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations. Please note this role will require attendance on-site 5 days a week.

Key Responsibilities

Windows Server & Remote Desktop Services (RDS / RDP) Design, build, configure, patch, and maintain enterprise Windows Server platforms — including Windows Server 2016/2019/2022 and 2025 — covering Active Directory, GPO, DNS, and DHCP.

Manage and support Remote Desktop Services (RDS) — Session Host, Connection Broker, Gateway, Web Access, and Licensing — including farm design, session management, and user-profile/FSLogix configuration.

Administer, secure, and troubleshoot the Remote Desktop Protocol (RDP) — connectivity, certificates, encryption/NLA, Group Policy controls, and remote-access performance.

Endpoint Management — SCCM/MECM, WSUS & Ivanti Design, implement, and maintain the SCCM/MECM hierarchy (Primary/Secondary sites, Distribution Points, Management Points, Software Update Points); define and enforce policies, standards, and operating procedures.

Administer WSUS and Software Update Points; manage Ivanti (and comparable endpoint/patch-management platforms) for patching, software distribution, and endpoint control.

Monitor site/endpoint health and client status; maintain boundaries, collections, and client settings; perform site backup and disaster-recovery validation.

Patch Management & Compliance Plan and execute enterprise patching strategies for Windows client/Server OS, Office, and third-party applications using WSUS, SCCM ADRs, and Ivanti.

Configure, test, and deploy Automatic Deployment Rules (ADRs) and Compliance Baselines; monitor compliance reports and remediate non-compliant endpoints and servers.

Collaborate with IT Security to align patching with corporate security policies and vulnerability-remediation targets.

Software Deployment & Application Packaging Package, test, and deploy applications across enterprise endpoints and RDS hosts using SCCM task sequences; automate deployments with PowerShell and advanced techniques.

Resolve deployment issues including application conflicts and installation failures; maintain software inventory, license tracking, and reporting.

Operating System Deployment (OSD) & Windows Lifecycle Manage Windows OS imaging, boot images, driver packages, and task sequences; lead in-place upgrades, bare-metal deployments, and device/server refresh cycles.

Maintain a library of standardised enterprise images (client and Server) aligned with IT standards; optimise OSD workflows for reliability and minimal downtime.

Automation, Reporting & Incident Leadership Drive automation for patching, provisioning, monitoring, and compliance using PowerShell (and tools such as Ansible/PowerCLI where applicable).

Develop SQL queries and SSRS reports for inventory, compliance, deployment, and patch status; track KPIs (patch-compliance rate, deployment success rate, client/server health).

Lead root-cause analysis for major incidents across Windows, RDS, and endpoint environments; mentor L1/L2 engineers and maintain accurate documentation (CMDB integrity, runbooks).

Technical Skills & Experience Essential

Advanced Windows Server administration — Windows Server 2016/2019/2022 and 2025 — including Active Directory, GPO, DNS, and DHCP.

Hands‑on management of Remote Desktop Services (RDS) — Session Host, Connection Broker, Gateway, Web Access, Licensing — and the Remote Desktop Protocol (RDP), including secure configuration and troubleshooting.

Proficient in Windows client OS, networking, and endpoint security.

Expert knowledge of SCCM/MECM — hierarchy, client deployment, site maintenance, task sequences, ADRs, and compliance baselines.

WSUS administration and enterprise patch management.

Ivanti (or comparable endpoint/patch-management platform) for patching and software/endpoint control.

PowerShell scripting for automation and troubleshooting; advanced SQL and SSRS reporting.

Must have DV Clearance

Desirable

FSLogix / user-profile management and VDI exposure; RDS farm scaling and load‑balancing.

Software packaging tools (AdminStudio, Wise, App-V); monitoring tools for large SCCM infrastructures.

Windows Server virtualisation (VMware vSphere/vCenter, Hyper‑V, or Nutanix) and automation (Ansible, PowerCLI).

Security baselines (e.g. CIS) and system‑hardening / ITSM compliance experience.

Qualifications & Certifications

Bachelor’s degree in IT, Computer Science, Engineering, or related field (or equivalent experience). Typically 4–8+ years in Windows Server/OS, SCCM/MECM administration, and endpoint/patch management.

Desirable: Microsoft Certified (e.g. Windows Server Hybrid Administrator Associate / endpoint‑management credentials), Ivanti product certification, and ITIL Foundation.

English proficiency to a high professional standard.

Professional Attributes

Strong analytical and problem‑solving skills for large‑scale deployments.

Clear written and verbal communication with technical and non‑technical stakeholders.

Automation‑first, continuous‑improvement mindset; strong documentation and knowledge‑sharing habits.

Able to mentor junior engineers and act as an escalation point under pressure.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritises in‑person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernisation, and Industry‑Specific Software Solutions, DXC modernises, secures, and operates some of the world’s most complex technology estates. Learn more on dxc.com.