Senior Client Endpoint & Identity Support Engineer

Senior Client Endpoint & Identity Engineer – Technology Operations (Full time)

Salary: £53,408 – £62,309 (dependent on experience)

Working pattern: Hybrid working

Location: OSHQ Southampton

Our growing Technology and Design team plays a key role in ensuring OS is at the cutting edge of geospatial capability. We work across the business to provide customer‑centric design and technology services.

We’re seeking a proactive Senior Client Endpoint & Identity Engineer to join our high‑performing Client Endpoint and Identity Service. In this senior role, you’ll be the technical lead in designing, implementing, and supporting enterprise‑level endpoint and identity solutions. You will shape strategic improvements, deliver roadmap initiatives, and ensure secure, scalable, and user‑focused access to corporate resources. As a senior team member, you’ll provide mentorship, coaching, and guidance, champion best practices, and promote effective collaboration.

• Design, implement, and maintain enterprise‑level endpoint security, identity governance, and device management solutions.
• Automate processes using Power Shell and develop scripts for configuration management.
• Define and enforce device configuration and security standards across platforms.
• Manage patching, compliance, software distribution, and cross‑platform device support.
• Select and implement effective technical solutions, troubleshooting issues.
• Engage stakeholders and provide excellent customer service.
• Act as an escalation point for complex issues and support system performance monitoring.
• Collaborate with security, infrastructure, and service desk teams to deliver integrated solutions.
• Create automation, maintain documentation, and contribute to team development.
• Participate in project planning, risk assessment, and continuous improvement initiatives.
• Lead engagements with key stakeholders, working with Service Management and external suppliers.
• Understand application packaging and deployment.
• Communicate technical concepts to both technical and non‑technical audiences.

• Experience in endpoint security, compliance, identity governance, and modern device management.
• Expertise in designing, implementing, and maintaining IT platforms.
• Proficiency in Power Shell for automation, scripting, and configuration management.
• Ability to define and enforce device configuration and security standards.
• Skilled in managing patching, compliance, software distribution, and cross‑platform device support.
• Strong problem‑solving skills and experience selecting effective technical solutions.
• Excellent stakeholder engagement and customer service skills.
• Acts as an escalation point for complex issues and supports system performance monitoring.
• Collaborates with security, infrastructure, and service desk teams to deliver integrated solutions.
• Creates automation, maintains documentation, and contributes to team development.
• Participates in project planning, risk assessment, and continuous improvement through technology evaluation.
• Experience leading engagements with key stakeholders, working with Service Management and External Suppliers.
• Understanding of application packaging and deployment.
• Experience leading projects, technical implementations and continuous improvements.
• Excellent communication skills, with the ability to translate technical concepts for both technical and non‑technical audiences.

• Advanced knowledge of Microsoft Endpoint Manager (Intune), including device configuration, compliance, application deployment, Windows Autopatch, and Autopilot.
• Strong experience with Azure Active Directory / Entra , conditional access, identity protection, and modern authentication methods (MFA, password‑less, certificate‑based authentication).
• Extensive expertise in Windows client OS, including lifecycle management, performance optimisation, security configuration, and troubleshooting.
• Hands‑on experience with Microsoft Defender for Endpoint and wider Defender suite integrations.
• Experience with identity lifecycle management, including provisioning, deprovisioning, and role‑based access models.

• Competitive…