Security Engineer

Job Summary:

We are seeking an experienced Global Protect End User Computing Engineer to join the Shared Technology Services End User Computing team. The successful candidate will be responsible for the administration, support, configuration, troubleshooting, and ongoing improvement of Palo Alto Global Protect remote access solutions, ensuring secure and reliable connectivity for users across multiple organisations.

The role will also support wider EUC services including Microsoft Intune, Windows 11, endpoint security, application deployment, device management, and user computing technologies. The engineer will work closely with Network, Security, Infrastructure, and Service Desk teams to deliver secure remote access services while maintaining excellent user experience and compliance with cybersecurity standards.

• Administer and support Palo Alto Global Protect remote access infrastructure.
• Configure and troubleshoot Global Protect client deployments, authentication methods, certificates, and connectivity issues.
• Manage VPN profiles, policies, client settings, and endpoint compliance integration.
• Investigate and resolve VPN connectivity, performance, and authentication incidents.
• Work with Network and Security teams to implement secure remote access solutions.
• Support migration projects involving VPN, ZTNA, Prisma Access, and remote connectivity services.
• Package, deploy, and maintain endpoint software using Microsoft Intune.
• Support Windows 10 and Windows 11 devices, including laptops, desktops, kiosks, and remote devices.
• Configure and manage Microsoft Intune policies, compliance policies, configuration profiles, and application deployments.
• Maintain documentation, operational procedures, knowledge articles, and technical designs.
• Participate in project delivery, service improvement initiatives, and technology refresh programmes.
• Provide 3rd line technical support and act as an escalation point for complex EUC issues.
• Support change management processes, CAB submissions, testing, and implementation activities.
• Strong experience with Windows 10 and 11 application deployment, configuration, troubleshooting and support

• Strong experience supporting Palo Alto Global Protect VPN solutions.
• Experience with Prisma Access and Zero Trust Network Access concepts.
• Knowledge of VPN technologies, remote access, SAML, LDAP, MFA, and certificate-based authentication.
• Experience administering Microsoft Intune and Endpoint Manager.
• Strong Windows 10 and Windows 11 support and troubleshooting skills.
• Experience with Microsoft Entra  (Azure AD), Conditional Access, and endpoint compliance.
• Experience with Intune application deployment and software packaging.
• Strong understanding of networking fundamentals including DNS, TCP/IP, routing, and firewalls.
• Experience supporting remote desktop technologies including AVD, Windows 365, RDS, and Remote App.
• Power Shell scripting and automation skills.
• Experience producing technical documentation and implementation plans.
• Excellent troubleshooting, analytical, and problem-solving skills.

• Palo Alto Networks certification (PCNSA, PCNSE or equivalent).
• Experience with Prisma Access.
• Experience supporting F5, Direct Access, Always-On VPN, or Zscaler.
• Experience working within Local Government or Public Sector environments.
• Understanding of Cyber Essentials Plus, ISO
  27001, and security best practices.

• Strong customer service focus.
• Excellent communication and stakeholder management skills.
• Ability to work independently and as part of a wider technical team.
• Able to manage multiple priorities within a fast-paced environment.
• Committed to continuous improvement and knowledge sharing.

• Hybrid working model.
• May require attendance at multiple customer locations.

Participation in planned out-of-hours changes and project implementations when required.