Deployment Engineer in Reading

Deployment Engineer – ELH Device Rollout (OT Environment)

Job Description

Role Summary

· The Deployment Engineer will support the rollout of ELH laptops across Thames Water OT and Field Operations teams.

· The role focuses on SCCM-based device build execution, post-build validation, logistics coordination, end-user handover, and embedded hypercare support.

· The engineer will work within a resource-based delivery model aligned to ELH governance, readiness criteria, stage gates, and wave-based rollout sequencing.

· The role is execution-focused, with ownership for image design, Task Sequence design, application packaging, security controls, and root-cause fixes remaining with Thames Water teams.

Key Responsibilities

· Execute laptop builds using Thames Water-approved SCCM images and Task Sequences, including build initiation, monitoring, completion checks, and build evidence capture.

· Perform post-build validation and functional checks before end-user handover, including application availability, network connectivity, VPN validation, and device readiness checks.

· Coordinate device staging, packaging, labelling, distribution, old-device collection, secure return coordination, and chain-of-custody tracking across agreed deployment locations.

· Support structured end-user handover, including user login validation, MFA setup, application access validation, handover documentation, and user acknowledgement capture.

· Maintain accurate deployment records, asset updates, validation checklists, handover documents, issue logs, escalation trackers, and audit-ready operational evidence.

· Provide L0/L1 hypercare support during Trial and Rollout phases, acting as the initial point of contact for deployment-related user issues and queries.

· Triage, categorise, track, and escalate build, infrastructure, application, network, VPN, or security-related issues to the appropriate Thames Water teams for L2/L3 resolution.

· Create and maintain knowledge base articles for common deployment-related L0/L1 issues to support BAU transition and ongoing support readiness.

· Provide regular deployment reporting covering progress, volumes, issues, risks, dependencies, throughput, and forward plan.

· Collaborate with ELH governance, OT Compute, OT Network, EUC teams, BAU support teams, logistics teams, and end users to ensure controlled and traceable deployment delivery.

Must-to-Have Skills

· Hands-on experience in laptop / endpoint deployment, build execution, imaging, validation, and rollout support.

· Working knowledge of SCCM / MECM build execution, PXE boot, approved Task Sequences, and Windows OS deployment processes.

· Ability to perform functional validation across device readiness, Microsoft 365 access, application availability, VPN setup, network connectivity, and user login validation.

· Experience with end-user handover, MFA setup support, issue handling, and first-line deployment hypercare.

· Strong experience maintaining deployment records, validation evidence, asset records, chain-of-custody logs, handover artefacts, issue logs, and escalation records.

· Experience logging, tracking, triaging, and escalating issues through ITSM processes and tools such as ServiceNow.

· Ability to operate in secure, governed, readiness-driven environments with defined RACI, stage-gate approvals, and escalation routes.

· Strong coordination skills for logistics, site readiness, device movement, user scheduling, and deployment reporting.

Good-to-Have Skills

· Experience working in OT, utilities, infrastructure, regulated, or security-sensitive environments.

· Exposure to large-scale, wave-based rollout programmes involving trial, rollout, hypercare, and BAU handover phases.

· Working knowledge of Active Directory object coordination, Microsoft licence assignment requests, security group validation, and endpoint tracking processes.

· Familiarity with VPN clients such as Ivanti VPN, endpoint security tools such as Symantec EPP, and device tracking systems such as Absolute.

· Experience creating knowledge base articles and supporting BAU handover, issue closure, asset reconciliation, and final reporting activities.

· Understanding of audit-ready documentation, chain-of-custody controls, operational reporting, and deployment governance.

Qualifications

· Diploma or bachelor’s degree in Information Technology, Computer Science, Engineering, or a related technical discipline, or equivalent hands-on experience.

· Relevant experience in desktop engineering, field services, endpoint deployment, IT operations, or device rollout support.

· Experience supporting enterprise IT deployment programmes and working with technical teams, service teams, and end users in controlled environments.

· Experience in deployment validation, end-user support, incident tracking, documentation, and operational reporting.

Certifications

· Microsoft Endpoint Configuration Manager, Microsoft Intune, Windows deployment, or equivalent endpoint management certification preferred.

· ITIL Foundation or equivalent IT service management certification preferred.

· Security clearance eligibility may be required. The engagement requires at least one SC-cleared resource for secure access activities.

· Additional Microsoft 365, Windows client, networking, or endpoint support certifications would be advantageous.

Soft Skills

· Clear communication with end users, technical teams, governance stakeholders, and BAU support teams.

· Attention to detail and strong ownership of documentation, evidence quality, asset accuracy, and audit readiness.

· Structured problem-solving and disciplined issue triage with appropriate escalation judgement.

· Adaptability in a flexible, readiness-based rollout model where sequencing, throughput, and deployment timelines may change.

· Customer-focused approach during user handover and hypercare support.

· Collaborative working style across OT Compute, OT Network, EUC, ELH governance, logistics contacts, and field users.