Security Engineer

Positive Employment; City Of London; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Possible on-site work

Job summary

Positive Employment is seeking an experienced GlobalProtect End User Computing Engineer to join the Shared Technology Services End User Computing team. You will administer, support, configure, troubleshoot, and improve Palo Alto GlobalProtect remote access solutions to ensure secure connectivity for users across multiple organisations.

The role also supports wider EUC services including Microsoft Intune, Windows 11, endpoint security, application deployment, device management, and user computing

Qualifications

• Experience administering Palo Alto GlobalProtect VPN solutions.
• Experience with Prisma Access and Zero Trust concepts.
• Knowledge of VPN technologies, SAML, LDAP, MFA, and certificate-based authentication.
• Experience administering Microsoft Intune and Endpoint Manager.

Responsibilities

• Administer and support GlobalProtect remote access infrastructure.
• Configure and troubleshoot GlobalProtect deployments and authentication methods.
• Manage VPN profiles, policies, client settings, and endpoint compliance integration.
• Provide 3rd line technical support and escalation for EUC issues.

Skills

GlobalProtect

Prisma Access

ZTNA

Intune

Endpoint Manager

Windows 10/11

Azure AD/Entra ID

PowerShell

Networking basics

Documentation

Tools

Microsoft Intune

Azure AD

Job description

Job Summary:

We are seeking an experienced GlobalProtect End User Computing Engineer to join the Shared Technology Services End User Computing team. The successful candidate will be responsible for the administration, support, configuration, troubleshooting, and ongoing improvement of Palo Alto GlobalProtect remote access solutions, ensuring secure and reliable connectivity for users across multiple organisations.

The role will also support wider EUC services including Microsoft Intune, Windows 11, endpoint security, application deployment, device management, and user computing technologies. The engineer will work closely with Network, Security, Infrastructure, and Service Desk teams to deliver secure remote access services while maintaining excellent user experience and compliance with cybersecurity standards.

Key Skills & Requirements:

• Administer and support Palo Alto GlobalProtect remote access infrastructure.
• Configure and troubleshoot GlobalProtect client deployments, authentication methods, certificates, and connectivity issues.
• Manage VPN profiles, policies, client settings, and endpoint compliance integration.
• Investigate and resolve VPN connectivity, performance, and authentication incidents.
• Work with Network and Security teams to implement secure remote access solutions.
• Support migration projects involving VPN, ZTNA, Prisma Access, and remote connectivity services.
• Package, deploy, and maintain endpoint software using Microsoft Intune.
• Support Windows 10 and Windows 11 devices, including laptops, desktops, kiosks, and remote devices.
• Configure and manage Microsoft Intune policies, compliance policies, configuration profiles, and application deployments.
• Maintain documentation, operational procedures, knowledge articles, and technical designs.
• Participate in project delivery, service improvement initiatives, and technology refresh programmes.
• Provide 3rd line technical support and act as an escalation point for complex EUC issues.
• Support change management processes, CAB submissions, testing, and implementation activities.
• Strong experience with Windows 10 and 11 application deployment, configuration, troubleshooting and support

Essential Skills & Experience

• Strong experience supporting Palo Alto GlobalProtect VPN solutions.
• Experience with Prisma Access and Zero Trust Network Access concepts.
• Knowledge of VPN technologies, remote access, SAML, LDAP, MFA, and certificate-based authentication.
• Experience administering Microsoft Intune and Endpoint Manager.
• Strong Windows 10 and Windows 11 support and troubleshooting skills.
• Experience with Microsoft Entra ID (Azure AD), Conditional Access, and endpoint compliance.
• Experience with Intune application deployment and software packaging.
• Strong understanding of networking fundamentals including DNS, TCP/IP, routing, and firewalls.
• Experience supporting remote desktop technologies including AVD, Windows 365, RDS, and RemoteApp.
• PowerShell scripting and automation skills.
• Experience producing technical documentation and implementation plans.
• Excellent troubleshooting, analytical, and problem-solving skills.

Desirable Skills

• Palo Alto Networks certification (PCNSA, PCNSE or equivalent).
• Experience with Prisma Access.
• Experience supporting F5, DirectAccess, Always-On VPN, or Zscaler.
• Experience working within Local Government or Public Sector environments.
• Understanding of Cyber Essentials Plus, ISO27001, and security best practices.

Personal Attributes

• Strong customer service focus.
• Excellent communication and stakeholder management skills.
• Ability to work independently and as part of a wider technical team.
• Able to manage multiple priorities within a fast-paced environment.
• Committed to continuous improvement and knowledge sharing.

Working Arrangements

• Hybrid working model.
• May require attendance at multiple customer locations.

Participation in planned out-of-hours changes and project implementations when required.