End User Platform Engineer

Job Title:

End User Platform Engineer Reporting to:
End User Technology Lead Direct Reports:
None Hybrid, minimum 3 days in the office per week

Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement:
Ops makes it happen. Operations is made up of 7 functions, this role sits within: IT We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact.

An experienced endpoint engineer responsible for identifying the underlying causes of vulnerabilities, non-compliance and remediation failure across the TMHCC workstation estate. The role will design, test and deliver scalable fixes rather than rely on repeated manual intervention. The EUP Engineer will use Qualys and other approved security data to prioritise risk, then apply strong packaging, SCCM/MECM, Power Shell and endpoint engineering skills to deliver controlled remediation.

The role will improve deployment quality, endpoint health and operational efficiency by creating repeatable processes, automation and clear technical standards. Direct business interaction is a key part of this role. The postholder will communicate technical risk and remediation plans clearly, manage stakeholder expectations and ensure agreed Service Level Agreements, quality thresholds and change controls are maintained. The Service Desk operates on a shift pattern between 08:00 and 18:00, Monday to Friday.

• Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse and prioritise findings from Qualys and other approved security platforms, considering technical impact, business risk and remediation feasibility.
• Perform structured root cause analysis for vulnerabilities, failed deployments, recurring non-compliance and endpoint health issues.
• Design sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.
• Create, test, peer review and deploy enterprise application packages, security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.
• Develop and maintain Power Shell automation for detection, remediation, validation, reporting and operational health checks.
• Troubleshoot SCCM/MECM client health, software distribution, content delivery, deployment status and patch installation failures.
• Use controlled pilot groups, technical validation and rollback planning to reduce deployment risk.
• Work with the End User Platform and Security teams to agree remediation strategy, technical ownership and delivery priorities.
• Recommend improvements to packaging standards,…