Digital Workplace Engineer (EUC)

Location: Cheltenham, Gloucestershire (hybrid working)

The role:

We are looking for a Digital Operations Engineer specialising in Endpoint Configuration & Policy to join our Digital Operations team. In this role, you will support the design, implementation, and continuous improvement of endpoint configuration, compliance, and security policies across a global environment. You’ll play a key part in delivering a consistent, secure, and scalable digital workplace experience, working primarily with Microsoft Intune and modern device management technologies. Acting as a subject matter expert, you will contribute to platform stability, compliance targets, and ongoing service improvement, while providing third-line support for complex endpoint issues.

Key responsibilities:

• Support the configuration and lifecycle management of Intune policies, compliance settings, and security baselines
• Assist with endpoint security controls, including Defender for Endpoint and encryption policies
• Help standardise and govern endpoint configuration across regions
• Support Entra ID device management and Conditional Access troubleshooting
• Assist with patch management (Windows Autopatch, Windows Update for Business, and third-party applications)
• Monitor device compliance and contribute to reporting dashboards and insights
• Develop and maintain documentation, runbooks, and knowledge articles
• Support device enrolment technologies such as Windows Autopilot, Apple Business Manager, and Android Enterprise
• Assist with application packaging and deployment through Intune
• Provide third-line support for endpoint and policy-related issues
• Collaborate with internal teams and vendors to resolve technical challenges and improve services

Your experience:

• Experience in IT infrastructure, endpoint management, or end-user support
• Hands-on experience with Microsoft Intune or similar MDM platforms
• Experience working with Windows 10/11 in enterprise environments
• Understanding of Active Directory / Entra ID and cloud identity
• Knowledge of mobile device management (iOS and/or Android)
• Experience with patch management processes such as Windows Update for Business or Autopatch
• Familiarity with IT service management frameworks
• Understanding of endpoint security and compliance standards (e.g., CIS benchmarks)

Your skills:

• Strong working knowledge of Microsoft Intune
• Good understanding of Windows, iOS, and Android operating systems
• Knowledge of Entra ID and Conditional Access
• Understanding of endpoint security tools such as Defender for Endpoint
• Familiarity with Windows Autopilot and modern provisioning
• PowerShell scripting (desirable)
• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities
• Experience in documentation and process development
• Awareness of compliance reporting tools (e.g., Intune reporting, Power BI)

Desirable:

• Microsoft Endpoint Administrator Associate (MD-102) or working towards
• Experience with SCCM/MECM or third-party patching tools
• ITIL Foundation certification
• Exposure to AV or print technologies

Benefits:

You will receive a competitive salary (and a discretionary bonus), flexible working and excellent benefits including 27 days holiday allowance (before bank holidays), 3 days’ paid volunteering leave, comprehensive private healthcare, enhanced pension plan, life assurance, optional participation in a Share Ownership Plan, free onsite parking, flexible benefits, and access to a personal discounts’ portal.

We also offer a range of additional support and benefits through our Everyone is Included Group Inclusion Plan.

Everyone is Included at Spirax Group:

We are passionate about creating inclusive and equitable working cultures where everyone can be themselves and achieve their full potential. For us, that means supportive teams and strong relationships where everyone’s contribution is valued - across social and cultural backgrounds, ethnicities, ages, genders, gender identities, abilities, neurodiversity, sexual orientation, religious beliefs, and everything else that makes us human and unique. We want everyone to be able to make their difference here, so we will always consider requests for flexible working. We know that everyone needs some extra help from time to time too, so we have introduced a range of additional benefits through our Group Inclusion Commitments. These include gender-neutral parental leave, 15 days of extra paid caregiver leave, paid time off and support for anyone experiencing pregnancy loss or domestic abuse, menopause-friendly workplace principles and more.

We are also a Disability Confident Committed Employer. If you would like to apply using this scheme, please select this option in our application form or notify our recruitment partners.