Senior Modern Workplace Engineer

Act as a senior SME and design contributor for Modern Workplace, identity and endpoint security.

Help shape and deliver the technical roadmap – spot what good looks like, build the case for it, and drive it forward.

Bring proven best practice to the table and challenge existing approaches where they can be improved.

Help set standards, governance and documentation, and support colleagues across the team.

Bring new ideas, tools and automation to modernise how we manage our endpoints, identifying the best approach where one doesn’t yet exist.

Introduce more proactive, vendor-aware management of our laptop estate – including monitoring for issues and keeping devices current with the right drivers and firmware.

Design and automate application packaging, deployment and patching so third-party applications stay up to date with minimal manual effort, delivering a smoother, more reliable experience for our users.

Manage and support an enterprise-scale estate using Microsoft Intune, overseeing the lifecycle of Windows 11, iOS and iPadOS, Microsoft Teams Rooms and macOS devices (where applicable).

Design, configure and maintain device configuration and security profiles, compliance policies, application deployment, and Windows Update / feature deployment rings.

Monitor device health, compliance and remediation through Intune analytics and reporting.

Act as senior technical escalation for complex endpoint issues, providing 3rd line support.

Build deep, hands-on knowledge of the capabilities we already own across Microsoft 365 and Copilot.

Drive adoption of these tools, recommending where they can add value and improve the experience for our users.

Contribute to governance, licensing and access discussions, and help evaluate and implement new Microsoft Modern Workplace capabilities.

Design, mature and continuously improve Conditional Access policies based on device compliance, identity, risk and application sensitivity.

Champion Zero Trust and Modern Authentication principles across the estate.

Advance MFA, passwordless and device-trust / compliance-based access controls.

Partner with Security to ensure endpoint and identity services meet internal and regulatory requirements, whilst always taking user experience into consideration.

Manage corporate-owned Apple devices using Microsoft Intune integrated with Apple Business Manager.

Support the Apple Business Manager environment – device assignment and ownership, Automated Device Enrolment (ADE) integration, and application and license management.

Administer and support Mobile Application Management (MAM) and App Protection Policies across iOS and Android.

Configure mobile application deployment, app protection policies and secure access to corporate applications and data.

Support device recovery, reassignment and redeployment, working alongside suppliers and resellers to maintain enrolment and governance.

Deliver a consistent, secure and intuitive experience across managed and BYOD platforms.

Maintain standards, technical documentation, processes and support runbooks.

Ensure changes align with ITIL Incident, Change and Problem Management practices.

Act as a technical SME within projects and transformation programmes.

Support audits, compliance activities and security reviews relating to endpoint management, identity and access management.

Strong, proven hands-on experience with Microsoft Intune at enterprise scale.

A track record of introducing automation and better processes to endpoint and application management.

Deep expertise in Conditional Access, Modern Authentication and Zero Trust principles.

Strong working knowledge of Microsoft Entra ID and Windows Autopilot.

Experience managing Windows and iOS devices across a large estate.

Microsoft Defender for Endpoint and device compliance / endpoint security experience.

PowerShell scripting and automation.

Excellent troubleshooting, communication and stakeholder engagement skills.

Comfortable working within structured change and governance processes.

Experience of application packaging and third-party patch automation tooling.

Apple Business Manager; Netskope Secure Web Gateway and/or Private Access.

MD-102 and/or ITIL certification; MECM Co-Management; KQL.

Experience managing macOS through Intune and supporting Microsoft Teams Rooms.

With an impressive order book of over £4.1 billion we are one of the industry’s leading principal contractors, affording you the opportunity to work on some of the UK’s most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we’re poised for further growth and success, so if you’re committed, talented and enthusiastic, Galliford Try is the right place for you.

We are committed to maintaining the physical and mental wellbeing of all our people, through our ‘Be Well’ programme which offers discounts on certain products, advice and support for a range of issues.

We invest in high-quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential.

Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged.

Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office-based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team.

Galliford Try is one of the UK’s leading construction groups with a vision to continuously be a people-orientated, progressive business, driven by our values to deliver lasting change for our stakeholders and the communities we work in.

Our purpose is to improve people’s lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work.

We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long-term value.

For more information on this role or to enquire about other positions available within our Specialist Services business please contact Chloe.Wharton@gallifordtry.co.uk

Galliford Try welcomes applications from candidates who would like to work full-time, reduced hours or flexibly and this will be discussed in more detail as part of the recruitment process.

We encourage, and would be grateful if, you could confirm any requirements we can reasonably fulfil to make this application a positive experience for you.

Don’t meet every requirement of the role? Studies have shown that some people are less likely to apply for jobs unless they meet every single qualification. At Galliford Try, we are committed to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every requirement of the role, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

As a Disability Confident employer, we have committed to offer an interview to any candidate with a long-term health condition or disability that meet the essential criteria for the advertised position. Please contact the Resourcing Partner listed within the job advert if you believe this applies to you. We will also take the opportunity to discuss any adjustments required for your interview.

#LI-CH1