Desktop Infrastructure Engineer

DSIT • Full-time • United Kingdom • £44.45k - £52.44k / year • 9h ago

Job summary

Please note this role requires you to pass Security Check clearance. For further information, please see 'Selection process details'.

The Desktop Engineering teams are responsible for delivering, supporting, and evolving the Department’s modern endpoint services at scale, supporting over 100,000 Windows 11 devices.

Operating across Live Running and Cloud-First engineering functions, the teams provide end-to-end ownership of desktop services, including operating system and application deployment, configuration, security, and day-to-day operational support.

Working within a cloud-native environment, the teams leverage technologies such as Microsoft Intune, Microsoft Endpoint Management, and Microsoft Defender for Endpoint, alongside supporting platforms including Ivanti UWM, BitLocker, Citrix, VPN integrations, and Zscaler.

They are accountable for both maintaining live services and driving continuous improvement through roadmap delivery, evergreen strategies, and the adoption of new and emerging capabilities.

This is a fast-paced and evolving area, with a multi-year roadmap focused on enhancing user experience, strengthening security, and delivering business value.

As service owners, the teams are responsible for architecture, design, feature onboarding, and operational change, ensuring the endpoint service continues to meet both strategic and day-to-day needs.

We are looking for Infrastructure Engineers to join us, taking ownership of key End-User Computing (EUC) services, contributing to service innovation, and helping shape the future of desktop engineering within the organisation.

There are excellent learning and development opportunities available, aligned to support your career growth.

Job description

We are seeking Infrastructure Engineers to join our Desktop Engineering team, supporting both live service operations and the design, delivery, and continuous improvement of a modern, secure, and resilient desktop environment.

The role spans two key areas: the deployment of changes across the estate and the support of complex 3rd line incidents. You will be responsible for delivering documented work packages (including policies, applications, and bespoke solutions) into Model Office and Production environments, while also acting as a technical escalation point for high-priority desktop issues requiring collaboration across Digital teams.

Working within a cloud-native, modern management environment, you will contribute to the deployment, configuration, and optimisation of endpoint services using technologies such as Microsoft Intune, Autopilot, Microsoft Configuration Manager, Defender for Endpoint, Entra ID, and Windows 10/11. You will also support integration across the wider desktop estate, including platforms such as Zscaler, Citrix, and related tooling. Key responsibilities include:

Supporting live service operations, including management of 3rd line incidents
Delivering technical changes and deployments to production environments
Creating and maintaining technical documentation (HLDs, LLDs, and operational guides)
Supporting project delivery through implementation and configuration
Contributing to proofs of concept and onboarding of new technologies
Representing the desktop service at governance, design, and change forums
Supporting roadmap delivery and continuous service improvement

You will also work with supporting technologies such as Windows Server, BitLocker, DHCP, GPO/configuration policies, software distribution (SCCM/Intune), SQL Server, monitoring tools, and scripting/reporting solutions (e.g., KQL, Power BI, Power Platform).

This is a fast-paced role in a continuously evolving environment, focused on delivering a modern, reliable, and secure end-user experience through evergreen practices and industry best standards.

You may be offered the opportunity to participate in out-of-hours on-call incident support on a rota basis. This is entirely optional, and full training will be provided.

Person specification

When giving details in your employment history and personal statement you should highlight your experience in line with essential criteria below:

Documented design experience Proven exposure and experience producing/updating clear, accurate High-Level Designs, Low-Level Designs, installation and operational documentation for enterprise infrastructure or desktop services.
Experience of managing pre-prod, dev and test environments.
Modern endpoint management at scale Hands-on engineering or operational experience with Microsoft Intune, Windows Autopilot, Windows 10/11, and Microsoft Defender for Endpoint in a large enterprise environment (10,000+ users).
Core cloud and identity infrastructure Practical experience supporting or engineering core services including Azure, Entra ID (Azure AD), Conditional Access, and on-prem Active Directory (DNS, DHCP, GPO).
Live service change and support Experience delivering and supporting technical change in a live service environment, including impact assessment, implementation, and post-change validation, alongside incident & problem management related activities.
Enterprise service delivery experience working in a large, multi-supplier or multi-team environment, understanding dependencies, governance, and shared accountability.
Desktop and application management Experience with software deployment and desktop management in an enterprise setting, including troubleshooting and lifecycle management.

If you would like to learn more about the role, please contact Richard.Hanley@dwp.gov.uk.

Apply