SC-Cleared Endpoint Build Engineer

ECS Resource Group; Reading; On-site; GBP 54,000 - 60,000; Full time

Job summary

ECS Resource Group is seeking an End Point Build Engineer to support a secure UK government project in Reading. The role requires live SC clearance and focuses on building and maintaining Windows endpoints using Intune, Autopilot, and security baselines.

Responsibilities include device provisioning for new starters, packaging and deploying applications, automation with PowerShell, and collaboration with Service Desk, Security, and IT teams to ensure smooth handover to support.

Qualifications

• 3+ years across Service Desk, desktop support, or End User Compute.
• Strong knowledge of Windows 10/11, Microsoft 365, Teams, Outlook, OneDrive, identity/access, and endpoint support.
• Experience with ITSM tools, incident management, queue control, priority handling and SLA-driven support.
• Ability to troubleshoot independently and elevate with clear technical detail.
• Experience coaching or mentoring less-experienced analysts and raising team quality.
• SC clearance is required. Candidates must hold or be willing to obtain and maintain the clearance.

Responsibilities

• Maintain and improve the Windows endpoint build standard, including Intune configuration, Autopilot profiles, compliance policies and approved security baselines.
• Build, enrol, configure and validate devices for new starters, refresh, replacement and other provisioning demand.
• Package, test and distribute approved applications using appropriate modern deployment methods and scripting where required.
• Maintain persona-based application and configuration assignments and support controlled changes through pilot and deployment rings.
• Troubleshoot complex provisioning, enrolment, application-deployment, policy and compliance issues.
• Use PowerShell and automation to reduce manual build effort, improve consistency and support zero-touch provisioning where approved.
• Work closely with Tech Bar, Service Desk, Security, ServiceNow and application teams to maintain accurate asset/configuration records and smooth handover into support.
• Maintain high-quality technical documentation, build procedures, test evidence, rollback plans and operational knowledge.
• Support lifecycle activity including new hardware models, firmware/driver changes, refresh planning and controlled retirement of obsolete build components.

Skills

Strong communication

Troubleshooting

Independent worker

Coaching/mentoring

Tools

PowerShell

Intune

Windows Autopilot

MSIX packaging

ServiceNow

Job description

ECS Resource Group is seeking an End Point Build Engineer to support a secure UK government project in Reading. The role requires live SC clearance and focuses on building and maintaining Windows endpoints using Intune, Autopilot, and security baselines.

Responsibilities include device provisioning for new starters, packaging and deploying applications, automation with PowerShell, and collaboration with Service Desk, Security, and IT teams to ensure smooth handover to support.