Senior Modern Workplace Engineer

Galliford Try; Hinckley; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Generous holiday entitlement

Cycle to Work scheme

Private medical scheme options

Pension plan

Career development opportunities

Job summary

Galliford Try is seeking a Senior Modern Workplace Engineer to lead, support and continually improve an estate of Windows and iOS devices. The role focuses on modernising endpoint management, strengthening identity and security controls, and maximizing Microsoft technology investments within a cloud-first workplace.

You will work with a capable Modern Workplace team, shaping strategy, driving automation, and influencing technical direction while delivering hands-on implementation and governance

Qualifications

• Hands-on, enterprise-scale Intune implementation and management.
• Experience delivering automation to endpoint and application management.
• Deep expertise in Conditional Access, Modern Authentication and Zero Trust.
• Strong knowledge of Microsoft Entra ID and Windows Autopilot.
• Experience managing Windows and iOS devices across large estates.
• Defender for Endpoint and device compliance/endpoint security experience.

Responsibilities

• Act as senior SME for Modern Workplace, identity and endpoint security.
• Shape and deliver the technical roadmap for Modern Workplace initiatives.
• Introduce automation and best practices to improve endpoint management.
• Set governance, standards and documentation across the team.
• Manage lifecycle of devices using Intune including Windows 11, iOS/iPadOS, and macOS where applicable.
• Provide 3rd line support for complex endpoint issues.

Skills

Intune experience

Automation

Conditional Access

Entra ID

Windows Autopilot

Defender for Endpoint

PowerShell scripting

Tools

Intune

Apple Business Manager

MECM

PowerShell

KQL

Job description

Role Title: Senior Modern Workplace Engineer

Business Unit: Group Services

Location: Hybrid working from our Leicester, Hinckley or Solihull offices. Applicants should be within reasonable commuting distance of one of these locations.

Role Overview

We are looking for a highly skilled Senior Modern Workplace Engineer to join our established Modern Workplace team. This is a senior technical position with responsibility for helping lead, support and continually improve an estate of approximately 9,000 Windows and iOS devices across the business.

This role combines technical leadership with hands‑on delivery, offering the opportunity to modernise endpoint management, enhance identity and security controls, and maximise the value of our existing Microsoft technology investments. You will play a key role in shaping our Modern Workplace strategy, driving automation, improving user experience, and supporting the adoption of modern Microsoft capabilities.

Reporting to the Modern Workplace Manager, you will act as a senior technical escalation point while helping define the future direction of our cloud‑first workplace environment.

We are a cloud‑first organisation with a significant investment in Microsoft technologies and a clear ambition to continue evolving our digital workplace.

You will join a highly capable team and be empowered to introduce new ideas, influence technical direction and drive meaningful improvements rather than simply maintain existing services.

Key initiatives you could help shape include:

• Intelligent and automated endpoint management.
• Greater adoption of Microsoft 365 and Microsoft Copilot capabilities.
• Passwordless authentication and modern identity services.
• Zero Trust security and Conditional Access maturity.
• Cloud‑native endpoint management and digital employee experience improvements.

What You’ll Be Doing

• Act as a senior SME and design contributor for Modern Workplace, identity and endpoint security.
• Help shape and deliver the technical roadmap – spot what good looks like, build the case for it, and drive it forward.
• Bring proven best practice to the table and challenge existing approaches where they can be improved.
• Help set standards, governance and documentation, and support colleagues across the team.
• Bring new ideas, tools and automation to modernise how we manage our endpoints, identifying the best approach where one doesn’t yet exist.
• Introduce more proactive, vendor‑aware management of our laptop estate – including monitoring for issues and keeping devices current with the right drivers and firmware.
• Design and automate application packaging, deployment and patching so third‑party applications stay up to date with minimal manual effort, delivering a smoother, more reliable experience for our users.
• Manage and support an enterprise‑scale estate using Microsoft Intune, overseeing the lifecycle of Windows 11, iOS and iPadOS, Microsoft Teams Rooms and macOS devices (where applicable).
• Design, configure and maintain device configuration and security profiles, compliance policies, application deployment, and Windows Update / feature deployment rings.
• Monitor device health, compliance and remediation through Intune analytics and reporting.
• Act as senior technical escalation for complex endpoint issues, providing 3rd line support.
• Build deep, hands‑on knowledge of the capabilities we already own across Microsoft 365 and Copilot.
• Drive adoption of these tools, recommending where they can add value and improve the experience for our users.
• Contribute to governance, licensing and access discussions, and help evaluate and implement new Microsoft Modern Workplace capabilities.
• Design, mature and continuously improve Conditional Access policies based on device compliance, identity, risk and application sensitivity.
• Champion Zero Trust and Modern Authentication principles across the estate.
• Advance MFA, passwordless and device‑trust / compliance‑based access controls.
• Partner with Security to ensure endpoint and identity services meet internal and regulatory requirements, whilst always taking user experience into consideration.
• Manage corporate‑owned Apple devices using Microsoft Intune integrated with Apple Business Manager.
• Support the Apple Business Manager environment – device assignment and ownership, Automated Device Enrolment (ADE) integration, and application and license management.
• Administer and support Mobile Application Management (MAM) and App Protection Policies across iOS and Android.
• Configure mobile application deployment, app protection policies and secure access to corporate applications and data.
• Support device recovery, reassignment and redeployment, working alongside suppliers and resellers to maintain enrolment and governance.
• Deliver a consistent, secure and intuitive experience across managed and BYOD platforms.
• Maintain standards, technical documentation, processes and support runbooks.
• Ensure changes align with ITIL Incident, Change and Problem Management practices.
• Act as a technical SME within projects and transformation programmes.
• Support audits, compliance activities and security reviews relating to endpoint management, identity and access management.

About You

• Strong, proven hands‑on experience with Microsoft Intune at enterprise scale.
• A track record of introducing automation and better processes to endpoint and application management.
• Deep expertise in Conditional Access, Modern Authentication and Zero Trust principles.
• Strong working knowledge of Microsoft Entra ID and Windows Autopilot.
• Experience managing Windows and iOS devices across a large estate.
• Microsoft Defender for Endpoint and device compliance / endpoint security experience.
• PowerShell scripting and automation.
• Excellent troubleshooting, communication and stakeholder engagement skills.
• Comfortable working within structured change and governance processes.

Desirable

• Experience of application packaging and third‑party patch automation tooling.
• Apple Business Manager; Netskope Secure Web Gateway and/or Private Access.
• MD-102 and/or ITIL certification; MECM Co‑Management; KQL.
• Experience managing macOS through Intune and supporting Microsoft Teams Rooms.

What We Can Offer in Return

With an impressive order book of over £4.1 billion we are one of the industry’s leading principal contractors, affording you the opportunity to work on some of the UK’s most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we’re poised for further growth and success, so if you’re committed, talented and enthusiastic, Galliford Try is the right place for you.

We are committed to maintaining the physical and mental wellbeing of all our people, through our ‘Be Well’ programme which offers discounts on certain products, advice and support for a range of issues.

We invest in high‑quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential.

Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged.

Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office‑based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team.

Our Benefits

We put our people first and our benefits package reflects that by offering a comprehensive range of attractive options to help support your career on top of a competitive salary.

• Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays
• A wide range of corporate discounts
• Cycle to Work schemes
• Comprehensive pension plan
• Regular Save as You Earn share purchase scheme
• Private medical scheme options are available for all salaried employees and our employee assistance programme also provides free 24/7 support to those who need it
• Paid for yearly membership to one recognised professional association relevant to your role

About us

Galliford Try is one of the UK’s leading construction groups with a vision to continuously be a people‑orientated, progressive business, driven by our values to deliver lasting change for our stakeholders and the communities we work in.

Our purpose is to improve people’s lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work.

We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long‑term value.

Additional Information

Galliford Try welcomes applications from candidates who would like to work full‑time, reduced hours or flexibly and this will be discussed in more detail as part of the recruitment process.

As a Disability Confident employer, we have committed to offer an interview to any candidate with a long‑term health condition or disability that meet the essential criteria for the advertised position.

At Galliford Try, we are committed to building a diverse, inclusive and authentic workplace.