Technical Specialist Premium – Zero Trust Network Access MacOS

HCLTech; Slough; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Global team culture

Competitive compensation

Job summary

HCLTech is seeking a Technical Specialist Premium for Zero Trust Network Access on MacOS in London. The role sits in the Remote Access team within End User Computing, delivering secure access for Deutsche Bank staff across personal and corporate devices.

You will engineer the Zero Trust infrastructure, refine backlog items with product management, and align with security, compliance, and data protection policies in a fast, Agile environment.

Qualifications

• Bachelor’s degree level or above.
• Experience with Agile or ITIL preferred.
• Network/security certifications preferred.

Responsibilities

• Configure, build and deploy platform configurations automatically.
• Own end-to-end aspects of the platform from engineering perspective.
• Ensure SDLC standards and security controls are met.
• Collaborate with product/operations to transition to production.
• Work with Jira and Agile processes.

Skills

MacOS expertise

MS Intune

End-to-end IT processes

PowerShell

Azure AD / Entra ID

AD governance / GPO to MDM

SDLC & Agile

Education

Bachelor's degree or higher

Agile or ITIL certification

Security/Network certs preferred

Tools

Intune

Palo Alto Prisma Access Agent

Palo Alto Enterprise Browser

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.

It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.

To learn more about how we can supercharge progress for you, visit www.hcltech.com

Job Title: Technical Specialist Premium – Zero Trust Network Access MacOS

Location: London, Uk (Hybrid- 3 days' work from office)

Role Summary:

The Remote Access team, within the ‘End User Computing’ division, is responsible for the delivery of remote access capability for all Corporate & BYOD devices used by all Deutsche Bank staff. The team loosely follows the Spotify Agile model and is structured into delivery teams (squads) that are each accountable for a specific set of technologies.

The Technical Specialist Premium will be responsible for engineering and driving the development of the Zero Trust Network Access infrastructure used to provide bank access for personal and corporate iOS, Windows and macOS devices in a very agile environment. He will be responsible of engineering of backlog items and interacts continuously with the product management function for backlog refinements and prioritization, always with scope to improve the user experience while staying secure.

Responsibilities/Tasks:

• Configure, build and deploy specific platform configurations based on the requirements in an automated way.
• Own from and end-to-end perspective all aspects of the platform from an engineering perspective.
• Ensure Architectural standards implemented within the end user device products are in line with all control function requirements and policies including Security (CSO), Compliance and Data Protection and End User Architecture, Standards and Governance.
• Constantly collaborate with product and operations team to ensure a smooth and clean transition from Engineering to Production in agreement with the requirements.
• Working Knowledge on SDLC platforms (Jira) and Agile methodology
• Be an advocate of continuous improvement and drive and encourage innovation within the team.
• Intune application packaging for Palo Alto Prisma Access Agent
• Intune application packaging for Palo Alto Enterprise Browser
• Ensuring adherence to the SDLC process and other company demanded engineering and release management practices.

Required Skills:

• Strong knowledge working with MacOS operating system components and architecture.
• Strong knowledge using MS Intune (endpoint manager): provisioning, configuration, compliance, conditional access, autopilot, app deployment
• Solid understanding of the end-to-end IT process, including architecture, design, implementation, and operations
• Scripting and automation knowledge in (Azure) PowerShell (preferred), automation, settings customization, and application configuration.
• Azure Active Directory (Entra AD) knowledge (Conditional access, identity protection and MFA, integration with intune and M365)
• Reasonable understanding of the Microsoft Active Directory architecture, GPO migration to MDM
• Working knowledge of SDLC and Agile

Education/Certification:

• Educated to bachelor’s degree level or above (or overseas equivalent)
• Agile or ITIL certification preferred.
• Relevant network and/or security certifications preferred

Candidate will be:

• Hands-on person, great in communicating and documentation, super strong network engineering and agile driven mindset.
• Logical, innovative, articulate, and able to work directly with technical and non-technical stakeholders.
• Organized and driven to continuously improve the platform and deliver an improved user experience.
• Diligent, methodical and able to constructively critique and improve designs and methods.
• Can work in virtual teams spanning multiple time zones.
• Keeps up to date on recent IT security incidents and threats

Benefits

• A supportive, diverse, and global team with a brilliant culture.
• Competitive compensation and benefits that includes vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land.
• Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
• Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks – Engagement Champion to name a few.
• To know more about us visit – www.hcltech.com
• For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.