End User Compute Engineer (EUC) - Workplace Enablement in Liverpool

Location: Hybrid - Liverpool, Merseyside (3 days a week on site)

Job Type: Full-time, Permanent (37.5 hours)

Salary: Competitive, based on experience + benefits + package

Security Clearance Requirements: Please note that holding a current Security Clearance is not essential at the time of application, but eligibility is required. This role requires the successful candidate to be eligible for Security Check (SC) clearance. To meet this requirement, applicants must:

• Have the right to work in the UK
• Have lived in the UK continuously for the past 5 years
• Not have spent more than 6 months outside the UK in total during that period
• Be willing to undergo security vetting as part of the onboarding process

About Us: Come and be a part of The Investigo Group (TIG), a dynamic coalition of cutting‑edge tech firms specialising in Platform, Software, Data, AI and other bleeding‑edge technology solutions. Our innovative prowess spans the globe while proudly hailing from the United Kingdom. The group is multi‑functional with a large portfolio of B2B products and services.

About You: You’re a technically capable End User Compute / Workplace Engineer who takes pride in delivering a reliable, secure, and well‑run internal IT environment. You enjoy balancing hands‑on technical work with process, documentation, and continuous improvement, and you care deeply about the end‑user experience.

About the Role: As an End User Compute Engineer – Workplace Enablement, you will be responsible for the delivery, support, and continuous improvement of internal workplace technologies. This includes Microsoft 365 services, endpoint management, patching, and secure onboarding of users and devices. The role is based at our Liverpool HQ, UK, with a hybrid working pattern of 3 days per week on site, and reports into the Head of Platform & Service Delivery.

Key Objectives:

• Drive delivery and operational support of Microsoft 365 services, including Exchange Online, SharePoint, Teams and Intune
• Design, build, maintain and deploy standardised endpoint images, configurations and device provisioning workflows
• Take operational responsibility for endpoint patching and update management across the internal estate, ensuring compliance targets are consistently achieved
• Act as technical escalation point for complex end user compute incidents, driving resolution through to closure
• Maintain and improve standard operating procedures, build documentation and technical knowledge articles
• Deliver secure onboarding and offboarding of users and devices, including identity and access configuration
• Collaborate closely with Wintel, Service Delivery, Platform and Security teams to resolve issues and improve service quality
• Contribute directly to governance, risk and compliance activities relating to internal IT services and endpoint security
• Drive automation, standardisation and continuous improvement initiatives across workplace technology services

Success in This Role Looks Like:

• Endpoint and M365 services are stable, secure and consistently delivered
• Patch compliance targets are met or exceeded across the device estate
• Standard builds, configurations and SOPs are actively maintained and adhered to
• Complex end user compute issues are owned, prioritised and resolved effectively
• Technical documentation is accurate, current and audit‑ready
• Measurable improvements are delivered to internal user experience and operational efficiency

What We’re Looking For: A technically capable and dependable End User Compute Engineer who is comfortable operating in a hybrid, security‑conscious environment and enjoys improving how workplace technology is delivered and supported.

Essential Experience & Skills:

• Strong hands‑on experience supporting Microsoft 365 (Exchange Online, SharePoint, Teams, Intune)
• Experience designing and delivering Windows Autopilot deployments and managing endpoint imaging, deployment and configuration across multiple imaging platforms
• Solid understanding of identity and access management, including Entra ID (Azure AD), Conditional Access policies, MFA and SSO
• Working knowledge of Active Directory and Group Policy in hybrid environments
• Hands‑on experience owning and delivering patch management, update ring configuration and endpoint compliance reporting across enterprise device estates
• Basic PowerShell scripting experience is essential, with a willingness to develop automation capability further
• Experience working in an internal IT or workplace technology environment
• Experience supporting governance or compliance frameworks
• Experience working in organisations with hybrid working models

Soft Skills & Behaviours:

• Strong communicator who can work effectively with both technical and non‑technical stakeholders
• Process‑oriented with excellent attention to detail
• Calm, conscientious and adaptable under pressure
• Proactive mindset with a focus on ownership and continuous improvement
• Positive team player with a collaborative approach

Certifications: At least one certification from the list below is required (or equivalent), with additional certifications considered advantageous:

• Microsoft 365 Fundamentals (MS-900)
• Endpoint Administrator Associate (MD-102)
• Azure Fundamentals (AZ-900)
• ITIL v4 Foundation or similar
• CompTIA or security‑related certifications

Desirable (Not Essential):

• Microsoft certifications (M365, Endpoint Manager, Azure Fundamentals)
• ITIL v4 Foundation or similar
• CompTIA or security‑related certifications
• Experience supporting governance or compliance frameworks
• Experience in organisations with hybrid working models

How to Apply: Please note that the talent acquisition team is managing this vacancy directly and we do not require agency support. Candidates who are successful will be required to undergo relevant security checks.

Our Process: Our talent acquisition team will be in touch if you're successful, the team will arrange a short screening call (max 30 minutes) to learn more about you, and what you are looking for and answer any questions you may have. If all goes well, the team will share your profile with the hiring manager for review. Our interview process is tailored to each role but typically the first half of the process is run remotely with a final stage on‑site.

Equal Opportunities: Here at TIG we are committed to equal opportunities and value diversity, equity and inclusion at our company. We do not discriminate based on race, religion, colour, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.