Windows Platform Security Engineer

Stanford Black Limited; Greater London; On-site; GBP 180,000 - 220,000; Full time

Benefits offered by this job

Free breakfast & lunch

13% pension

Year-one guaranteed bonus

Allowance for work abroad days

Private health

Job summary

A systematic hedge fund is seeking a Windows Platform Security Engineer to design and secure Windows platforms critical for trading. The ideal candidate will possess strong experience with Microsoft Azure, Intune, and PowerShell scripting, focusing on maintaining secure systems. This role offers a collaborative environment with direct access to senior leadership, along with a range of benefits including free lunch, gym access, and a guaranteed bonus in the first year.

Qualifications

• Strong hands-on experience engineering and securing Windows-based platforms in an enterprise environment.
• Extensive experience with Microsoft Azure, Entra ID, Microsoft 365, Intune, and Windows 10/11.
• Advanced PowerShell scripting skills with a strong automation mindset.

Responsibilities

• Design and operate secure, highly available Windows platforms across Azure, Microsoft 365, Intune, Entra ID, and Citrix VDI.
• Own and evolve the Citrix DaaS / Virtual Apps & Desktops environment, ensuring performance, resilience, and security.
• Implement and maintain endpoint and identity security controls.

Skills

Windows-based platforms engineering

Microsoft Azure

PowerShell scripting

Endpoint security

Automation mindset

Tools

Terraform

Azure

Intune

Job description

Windows Platform Security Engineer | Systematic Hedge Fund - Up to £200k TC

A high-performance systematic hedge fund is seeking a Security & Platform Engineer (Windows Infrastructure) to design and secure the Windows and end-user platforms that support its trading and research environment. The team builds and maintains secure-by-design services across Azure, Microsoft 365, Entra ID, Intune, and Citrix VDI, ensuring the platform remains resilient, scalable, and fit for continued growth.

This role suits someone who enjoys deep technical ownership, combining strong Windows expertise with a security-first engineering mindset in a high-performance environment.

Role Overview

• Design and operate secure, highly available Windows platforms across Azure, Microsoft 365, Intune, Entra ID, and Citrix VDI.
• Own and evolve the Citrix DaaS / Virtual Apps & Desktops environment, ensuring performance, resilience, and security.
• Drive standardisation and hardening across Windows 10/11, VDI images, and cloud-hosted workloads.
• Embed secure-by-design principles into Windows, identity, endpoint, and VDI platform engineering.
• Implement and maintain endpoint and identity security controls, including Intune security baselines, Conditional Access, device compliance, and privileged access.
• Manage patching, updates, and lifecycle processes to meet security and operational standards.
• Build automation and infrastructure-as-code using PowerShell, Terraform, ARM templates, and related tooling.
• Reduce manual operations through repeatable, auditable automation and platform engineering.
• Act as an escalation point for complex issues across Windows, Azure, Citrix, identity, and endpoint platforms.
• Produce and maintain technical documentation, designs, and operational runbooks.

Requirements

• Strong hands-on experience engineering and securing Windows-based platforms in an enterprise environment.
• Extensive experience with Microsoft Azure, Entra ID, Microsoft 365, Intune, and Windows 10/11.
• Strong background in Active Directory, Group Policy, DNS, and identity services.
• Experience implementing endpoint security, Conditional Access, device compliance, and configuration hardening (CIS / Microsoft baselines).
• Advanced PowerShell scripting skills with a strong automation mindset.
• Experience with Terraform, ARM templates, and configuration or endpoint management tooling.
• Familiarity with Windows patching, lifecycle management, monitoring, and performance tuning.
• Able to collaborate effectively with Infrastructure and Security teams, balancing security, usability, and operational efficiency.

Company Highlights

• Technology-led culture – drives both trading and internal engineering investment
• c.1,000 employees – large enough for scale, small enough for meaningful individual impact
• Brand-new London HQ – core engineering and trading hub with free on-site gym
• Flat structure – direct access to senior engineers and C-level leadership
• Excellent Glassdoor ratings consistently quoting a strong work-life balance
• Strong Benefits: Free breakfast & lunch, 13% pension, year-one guaranteed bonus, allowance of work abroad days, private health, and more