Senior Endpoint & Identity Engineer – Hybrid Lead in Southampton

Salary: £53,408 – £62,309 (dependent on experience)

Working pattern: Hybrid working

Location: OSHQ Southampton

About the team

Our growing Technology and Design team plays a key role in ensuring OS is at the cutting edge of geospatial capability and is looking for people to join them. Its mission is to work across the business to provide customer centric design and technology services. Join us and you’ll have an opportunity to make an impact. To empower projects that deliver real-world benefits across Britain and internationally. To hear our customers say they couldn’t have done it without us. And to be central to OS’s vision: to be recognised as world leaders in geospatial services; creating location insight for positive impact.

About the role

We’re seeking a proactive Senior Client Endpoint & Identity Engineer to join our high performing Client Endpoint and Identity Service. In this senior role, you’ll take the technical lead in designing, implementing, and supporting enterprise level endpoint and identity solutions. As a subject matter expert, you will shape strategic improvements, deliver roadmap initiatives, and ensure secure, scalable, and user focused access to corporate resources as we continue to evolve our modern digital workplace. As a senior member of the team, you’ll bring both deep technical expertise and leadership providing mentorship, coaching, and guidance to colleagues. You’ll champion best practices, foster effective collaboration, and promote clear, open communication across the service.

What we’re looking for

We’re looking for a Senior Client Endpoint & Identity Engineer who can demonstrate the following:

• Essential
• Experience in endpoint security, compliance, identity governance, and modern device management.
• Expertise in designing, implementing, and maintaining IT platforms.
• Proficiency in PowerShell for automation, scripting, and configuration management.
• Ability to define and enforce device configuration and security standards.
• Skilled in managing patching, compliance, software distribution, and cross platform device support.
• Strong problem-solving skills and experience selecting effective technical solutions.
• Excellent stakeholder engagement and customer service skills.
• Acts as an escalation point for complex issues and supports system performance monitoring.
• Collaborates with security, infrastructure, and service desk teams to deliver integrated solutions.
• Creates automation, maintains documentation, and contributes to team development.
• Participates in project planning, risk assessment, and continuous improvement through technology evaluation.
• Experience leading engagements with key stakeholders, working with Service Management and External Suppliers.
• Understanding of application packaging and deployment.
• Experience leading projects, technical implementations and continuous improvements.
• Excellent communication skills, with the ability to translate technical concepts for both technical and non-technical audiences.
• Desirable
• Advanced knowledge of Microsoft Endpoint Manager (Intune), including device configuration, compliance, application deployment, Windows Autopatch, and Autopilot.
• Strong experience with Azure Active Directory / Entra ID, conditional access, identity protection, and modern authentication methods (MFA, password-less, certificate based auth).
• Extensive expertise in Windows client OS, including lifecycle management, performance optimisation, security configuration, and troubleshooting.
• Hands-on experience with Microsoft Defender for Endpoint and wider Defender suite integrations.
• Experience with identity lifecycle management, including provisioning, deprovisioning, and role-based access models.

If you are interested in joining a team that lies at the heart of what OS is about, we are looking for someone that can demonstrate skills and experience in:

• A proactive approach, taking ownership of operational issues, identifying inefficiencies, and driving initiatives to improve and streamline services.
• Strong PowerShell skills for scripting, automation, and configuration management.
• Experience coaching and mentoring junior colleagues and support teams.
• Hands-on experience implementing Client Endpoint and Identity solutions.
• The ability to lead technical projects as a subject matter expert and provide consultancy.
• Experience defining roadmaps and delivering key workstreams to support strategic goals.

The rewards

We want you to love what you do and feel supported to do your best work.

• Competitive salary and pension (OS contribute up to 12.07%)
• Performance‐related bonus (where applicable)
• 28 days annual leave plus bank holidays (increasing with service)
• Enhanced family leave, including paid partner leave
• Hybrid and flexible working options
• Learning and development support, coaching and mentoring
• Free subscription to OS Maps and access to wellbeing support
• Volunteering leave and matched fundraising

Location & working pattern

We embrace a hybrid working model at OS, because we believe in flexibility and balance. You’ll be based at our fantastic HQ in Southampton, Hampshire, where you'll spend 50% of your working week collaborating face-to-face with colleagues. It’s all about combining the best of both worlds connection and autonomy to help you thrive.

Security & eligibility

OS conducts pre-employment checks for anyone made an offer of employment, including identity, right to work, employment history and criminal record checks (via Disclosure & Barring Services (DBS). Some of our roles may require additional security vetting. We will advise candidates during the recruitment process if additional vetting may be required for that specific role. This role requires the right to work in the UK at the time of application. Unfortunately, OS cannot provide visa sponsorship for this position.

Inclusion at OS

Research shows that people from underrepresented groups often hesitate to apply unless they meet every requirement. At Ordnance Survey, we’re committed to building a diverse, inclusive and welcoming workplace. If this role excites you but your experience doesn’t match every point, we encourage you to apply. You may be the right person for this role or another opportunity at OS. We are happy to consider any reasonable adjustments that people may need during the recruitment process, and you will be asked whether you require any during the application process.

Closing date: Sunday 14 June 2026

Interview dates: TBC (via MS Teams and/or in person)

Who we are

We are Ordnance Survey, Great Britain’s national mapping service and a pioneer in geospatial technology. With over 230 years of trusted data, we empower better decisions, deeper understanding, and meaningful connections to the places we live, move through, and care for.

Three principles one direction

• Clear the path – Cut the noise. Simplify. Move at pace.
• Seek the story – Listen. Understand. Speak up.
• Do what matters – Focus on value.

Our principles unite us in delivering our Data & Destinations strategy with more simplicity, more clarity, and renewed momentum for each other and for our customers. They’re here to create more good days, and fewer harder ones but only if each one of us plays our part.

Skills required for this role: Apple iOS, Apple Mac OS, Coaching, Communication, Corporate Identity Design, Device Configuration, Device Management, Endpoint Management, Endpoint Security, Escalation Management, Escalation Resolution, Identity Governance, Identity Management (IdM), Information Technology Security, Issue Escalation, IT Automation, IT Compliance Management, IT Documentation, IT Mentoring, IT Project Planning, IT Risk Assessments, Operational Efficiency, Organisational Skills, Patching.