Senior Endpoint Experience Engineer

Brevan Howard Asset Management is one of the leading absolute return/hedge fund managers, overseeing assets on behalf of institutional investors from around the world, including pension funds, endowments, insurance companies, government agencies, private banks, and fund of funds. Brevan Howard was founded in 2002 and launched its flagship global macro strategy in April 2003. It currently manages over $25bn and engages in discretionary directional and relative value trading in fixed income and FX markets, as well as the recently launched BH Digital, a division within Brevan Howard to manage crypto and digital asset strategies. The firm currently employs over 500 personnel worldwide, including over 100 investment professionals. This global presence gives Brevan Howard the ability to identify and source attractive investment opportunities, as well as investment management talent wherever they may be. Brevan Howard has won several industry awards for excellence in risk management, operational robustness, and investment performance. The firm currently has offices in London, Edinburgh, Jersey, Geneva, New York, Austin, Chicago, Hong Kong, Singapore, and the Cayman Islands.

This role presents an exciting opportunity to help design, resource and build a new, robust best-in-class server infrastructure for Brevan Howard. The successful candidate will be able to combine their industry experience with a vision for further developments in a fast-paced environment.

MAIN DUTIES/RESPONSIBILITIES OF THE ROLE

• Build, configure and maintain Windows 11 and macOS (MacBook) device images and engineering standards, ensuring a consistent and high-quality end-user experience across the global estate.
• Manage and administer endpoint platforms using Microsoft Intune and SCCM/MECM, including policy configuration, compliance baselines, and device lifecycle management.
• Design, package, test and deploy applications across Windows and macOS environments, ensuring reliable and efficient software delivery through Intune and SCCM.
• Scan, identify and remediate endpoint vulnerabilities across Windows and macOS devices using appropriate tooling, evaluating severity, potential impact and exploitability to prioritise remediation effectively.
• Collaborate with Cyber Security, Compliance and Service Management teams to ensure endpoint environments remain secure, compliant and aligned with organisational standards.
• Track vendor patch releases and manage the timely deployment of OS and application patches across the endpoint estate in a prioritised and controlled manner; recommending mitigation measures, such as configuration changes, where immediate patching is not feasible.
• Act as a senior escalation point for the global support team, providing expert-level troubleshooting and guidance on complex endpoint issues across Windows and macOS platforms.
• Develop a strong understanding of business processes and how they interact with endpoint technology, using this context to inform engineering decisions and support priorities.
• Continually review, update and improve endpoint engineering processes, procedures and standards to drive operational excellence and efficiency.

SPECIAL CIRCUMSTANCES

• 9 hour working days between core business hours (0800 – 1800)
• Some weekend and on-call work will also be necessary.
• Overseas travel will be required on occasion.

PERSON SPECIFICATION

• Ability to work in a challenging and dynamic environment
• Experience of providing production and development support for business critical applications and servers
• Ability to communicate and work effectively with other IT staff, e.g. developers, desktop support
• 5+ Years of experience specialising in Microsoft Azure technologies
• Bachelor’s degree in Engineering, computer science, or equivalent work experience.
• Experience of working in a financial background is preferred.
• Extensive knowledge of Windows Server/Client operating systems and services. (MCSA preferred)
• Active Directory, Group Policy, ADFS, Azure AD, Conditional Access and SSO, DHCP, DNS
• Microsoft SCCM / MECM, Jamf Patch My PC
• PowerShell scripting in enterprise production environments
• Microsoft Intune / Endpoint Management
• Intune update rings
• Windows 10