Location
Central London

Hours
Full Time

Salary
£44,447 to £52,442 per annum. The maximum salary for the grade is £46,547, with a Digital Allowance of up to £5,895 per annum available for exceptional candidates. The Digital Allowance is non-salary, non-pensionable, and temporary, reviewed annually.

About the Role
The Desktop Engineering teams are responsible for delivering, supporting, and evolving the Department for Work and Pensions’ modern endpoint services at scale, supporting over 100,000 Windows 11 devices. Operating across Live Running and Cloud-First engineering functions, the teams provide end-to-end ownership of desktop services, including operating system and application deployment, configuration, security, and day-to-day operational support.

Working within a cloud-native environment, the teams leverage technologies such as Microsoft Intune, Microsoft Endpoint Management, and Microsoft Defender for Endpoint, alongside supporting platforms including Ivanti UWM, BitLocker, Citrix, VPN integrations, and Zscaler. They maintain live services and drive continuous improvement through roadmap delivery, evergreen strategies, and adoption of new capabilities.

This fast-paced and evolving area focuses on enhancing user experience, strengthening security, and delivering business value. As service owners, the teams are responsible for architecture, design, feature onboarding, and operational change to ensure the endpoint service meets strategic and operational needs.

As a Desktop Infrastructure Engineer, you will take ownership of key End-User Computing (EUC) services, contribute to service innovation, and help shape the future of desktop engineering within the organisation. You will support both live service operations and the design, delivery, and continuous improvement of a modern, secure, and resilient desktop environment.

The role involves deploying changes across the estate and supporting complex 3rd line incidents. Responsibilities include delivering documented work packages into Model Office and Production environments, acting as a technical escalation point for high-priority desktop issues, and collaborating across Digital teams.

You will work with technologies such as Microsoft Intune, Autopilot, Microsoft Configuration Manager, Defender for Endpoint, Entra ID, Windows 10/11, Zscaler, Citrix, Windows Server, BitLocker, DHCP, GPO/configuration policies, software distribution (SCCM/Intune), SQL Server, monitoring tools, and scripting/reporting solutions (e.g., KQL, Power BI, Power Platform).

This role may include optional participation in out-of-hours on-call incident support on a rota basis, with full training provided.

There are excellent learning and development opportunities aligned to support your career growth.

Experience
- Documented design experience producing and updating High-Level Designs, Low-Level Designs, installation, and operational documentation for enterprise infrastructure or desktop services.
- Experience managing pre-production, development, and test environments.
- Hands-on engineering or operational experience with Microsoft Intune, Windows Autopilot, Windows 10/11, and Microsoft Defender for Endpoint in a large enterprise environment (10,000+ users).
- Practical experience supporting or engineering core cloud and identity infrastructure services including Azure, Entra ID (Azure AD), Conditional Access, and on-premises Active Directory (DNS, DHCP, GPO).
- Experience delivering and supporting technical change in a live service environment, including impact assessment, implementation, post-change validation, incident and problem management.
- Enterprise service delivery experience in large, multi-supplier or multi-team environments with understanding of dependencies, governance, and shared accountability.
- Experience with software deployment and desktop management in an enterprise setting, including troubleshooting and lifecycle management.

About You
You are a proactive and skilled Infrastructure Engineer with a passion for delivering modern, secure, and resilient desktop services. You thrive in a fast-paced, evolving environment and are committed to continuous improvement and innovation. You have strong collaboration skills and can act as a technical escalation point, working effectively across teams to resolve complex issues.

You are adaptable, eager to learn, and motivated to develop your career within a supportive and inclusive organisation.

Qualifications
Security Check clearance is required for this role. Candidates must have resided continuously in the UK for at least 3 of the last 5 years, including the 2 immediately preceding years.

Relevant industry qualifications and accreditations are desirable but not mandatory. Commitment to ongoing professional development is expected.