Senior Windows End User Compute (EUC) Engineer

ByDesign Secure Systems Ltd; West of England; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

ByDesign Secure Systems Ltd is seeking a Senior Windows EUC Engineer to deliver secure, mission-critical end-user computing solutions in UK gov-aligned environments. The role focuses on building and maintaining a private cloud-based EUC stack with RDS, gold images, and strict GPO-based controls.

You will work across architecture, security and engineering teams to implement STIGs, maintain end-user experiences in air-gapped environments, and produce detailed designs and runbooks for governance

Qualifications

• 7+ years Windows EUC engineering experience.
• Strong experience with Windows Server and Windows desktop platforms.
• Hands-on experience with Remote Desktop Services (RDS).
• Deep understanding of GPO management and Windows security hardening.
• Experience supporting enterprise-scale desktop environments.
• Experience in disconnected, air-gapped environments or highly secure environments.

Responsibilities

• Build, configure and support Windows virtual desktop infrastructure using RDS.
• Develop secure Windows desktop standards and gold images.
• Implement and maintain Group Policy Objects (GPOs).
• Apply STIGs and security baselines; harden endpoints.
• Manage endpoint configuration and user experience in secure environments.
• Troubleshoot and resolve Windows desktop and virtual desktop issues.
• Produce technical documentation and runbooks; contribute to design reviews.
• Collaborate with architecture, security and engineering teams to deliver standards-compliant solutions.

Skills

Windows EUC

RDS

GPO management

Security hardening

Enterprise desktops

Troubleshooting

Stakeholder comms

Job description

Senior Windows End User Compute (EUC) Engineer

This role is delivered within secure environments. Candidates must hold active SC/DV clearance and hold UK citizenship.

Join the Mission

At ByDesign Secure, we believe that world-class security shouldn't be an afterthought—it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help engineer a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in "billing by the hour" or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.

About the Opportunity

Are you a Senior Windows End User Compute (EUC) Engineer with a passion for engineering secure, mission-critical systems?

We’re looking for an experienced Senior Windows End User Compute (EUC) Engineer with deep Microsoft skills to join our team. You’ll be part of a multi-year transformation programme, shaping and implementing some of the most strategically significant government systems in operation today.

What You’ll Be Doing

Build, configure and support Windows virtual desktop infrastructure using Remote Desktop Services (RDS).

Develop secure Windows desktop standards and gold images.

Implement and maintain Group Policy Objects (GPOs).

Apply STIGs, security baselines and endpoint hardening controls.

Manage endpoint configuration and user experience within secure environments.

Troubleshoot and resolve Windows desktop and virtual desktop issues.

Produce technical documentation, operational procedures and support runbooks.

Contribute to technical design reviews and service improvements.

Provide support to a model office environment where we will have the capability to demonstrate capabilities to our end users to facilitate rapid feedback.

Operate and maintain solutions within disconnected, air-gapped, and security-sensitive environments, ensuring compliance with organisational security requirements.

Collaborate with architecture, security, and engineering teams to deliver solutions aligned with enterprise standards and best practices.

Develop and maintain technical documentation, including High-Level Designs (HLDs), Component-Level Designs (CLDs), Low-Level Designs (LLDs), operational procedures, and support runbooks.

Produce and present technical designs, implementation plans, and service improvements through governance and Technical Design Authority (TDA) processes as required.

What You’ll Bring

7+ years Windows EUC engineering experience.

Strong experience with Windows Server and Windows desktop platforms.

Hands-on experience with Remote Desktop Services (RDS).

Deep understanding of GPO management and Windows security hardening.

Experience supporting enterprise-scale desktop environments.

Experience in disconnected, air-gapped or highly secure environments.

Strong troubleshooting and documentation skills.

Ability to engage with technical and non-technical stakeholders.

Bonus Points For

Prior experience working on government classified systems or within secure data centre environments.

Experience of configuring and using AI technologies within cloud environments.

Familiarity with NCSC guidance, UK Government cloud policies, or cross-domain architectures.

Cloud Certifications.

Existing DV clearance.

Why This Role?

Work on high-impact, nationally significant projects that make a real difference.

Join a trusted specialist integrator with a proven record of secure delivery into UK Government.

Be part of a multi-year programme offering long-term stability and genuine career growth.

Clearance Requirements:

This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).

Work Location: Hybrid remote in London / Bristol

Job Types: Temporary, Fixed term contract (Outside of IR35)

Screener Questions:

Do you hold UK nationality? (Required due to client security restrictions)

Do you currently hold active UK SC clearance?

Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)

Does your delivery approach allow for on-site presence in London or Bristol when required (typically 3 days per week)?