Senior Workspace Engineer

Magnit Global; Greater London; On-site; GBP 115,000 - 157,000; Full time

Job summary

Magnit Global is seeking a Senior Workspace Engineer to lead vulnerability remediation within a large enterprise virtual desktop estate in London. The role focuses on engineering, security and ongoing improvement across Windows, Citrix CVAD and related infrastructure, in collaboration with Vulnerability Management and Cyber Security teams.

The engineer will implement configuration, patching, hardening and security changes, support Windows 11 and Server environments, and help transition

Qualifications

• Extensive hands-on Virtualisation/EUC engineering in large enterprises.
• Experience in Banking/FS environments.
• Strong Citrix CVAD engineering and support skills.

Responsibilities

• Engineer and improve a large enterprise VDI/virtual desktop estate.
• Assess vulnerabilities and implement remediation across Windows/Citrix.
• Automate remediation and patching processes where possible.
• Support Windows 11 and Server 2019/2022/2025 environments.
• Work with security teams to remediate identified risks.

Skills

Citrix CVAD

VDI

PowerShell

Windows Server

Active Directory

Tools

Qualys/Tenable

Vulnerability mgmt tools

Job description

Senior Workspace Engineer | Vulnerability Remediation

6 month contract | London | Global Banking Organisation

Up to £735 per day inside IR35

We are looking for an experienced Digital Workspace Engineer to join a major technology and security improvement programme within a large financial services organisation.

The role will focus on the engineering, security and ongoing improvement of a large enterprise virtual desktop estate. Working closely with Vulnerability Management, Cyber Security and infrastructure teams, you will be responsible for assessing security findings and implementing the technical changes required to remediate vulnerabilities across the virtualisation environment.

Key Responsibilities:

• Engineer, support and improve a large enterprise virtual desktop and virtualisation estate.
• Assess vulnerability and security findings and determine the appropriate technical remediation.
• Implement configuration, patching, hardening and security changes across the virtual desktop environment.
• Support Windows 11 and Windows Server 2019/2022/2025 environments.
• Engineer and maintain Citrix and non-persistent virtual desktop environments.
• Work closely with Vulnerability Management and Cyber Security teams to remediate identified risks.
• Remediate findings generated through vulnerability scanning, security assessments and Red Team activity.
• Troubleshoot complex virtualisation, desktop and Windows infrastructure issues.
• Deliver technical changes through established enterprise change and governance processes.
• Identify opportunities to automate and improve vulnerability-remediation processes.
• Help transition remediation from backlog-driven activity into an efficient and sustainable BAU process.

Key Skills & Experience:

• Strong hands-on Virtualisation / EUC Engineering experience within large enterprise environments, proven experience working within Banking and FS is essential.
• Deep technical knowledge of Citrix Virtual Apps and Desktops (CVAD), including the engineering, configuration, maintenance and troubleshooting of enterprise Citrix environments.
• Strong experience engineering and supporting VDI and non-persistent virtual desktop environments, including management and maintenance of master/golden images.
• Strong Windows 11 desktop engineering experience, including OS configuration, security hardening, Group Policy and enterprise desktop management.
• Strong Windows Server 2019, 2022 and/or 2025 engineering and administration experience.
• Good technical knowledge of Microsoft 365 and its integration within enterprise virtual desktop environments.
• Experience implementing OS and application patching, security hardening and vulnerability remediation across Windows and virtual desktop estates.
• Ability to analyse vulnerability findings and translate them into appropriate infrastructure changes, configuration changes, patches or technical remediation.
• Experience remediating CVEs, security vulnerabilities, configuration weaknesses, unsupported/EOL software and security-control gaps within Windows/EUC environments.
• Experience working with vulnerability-management platforms such as Qualys, Tenable or similar, including interpreting scan results and supporting remediation through to validation and closure.
• Experience working with Cyber Security, Vulnerability Management, Penetration Testing or Red Team functions to remediate identified security risks.
• Strong knowledge of Active Directory, Group Policy and Entra ID within enterprise Windows environments.
• Experience with PowerShell scripting and automation for administration, configuration, remediation or deployment activities.
• Understanding of enterprise security baselines and Windows/Citrix hardening standards.
• Experience troubleshooting complex Citrix, VDI, Windows desktop, application and user-session issues.
• Experience implementing infrastructure changes through formal change, release and production governance processes.
• Experience improving or automating vulnerability-remediation and patching processes would be highly desirable.