Senior Infrastructure Engineer Endpoints

Lead Infrastructure Engineer / Team Leader Endpoints

Onsite
This role will be based on site, primarily in the named location.

We have one simple promise - to make a positive impact. Through our ground-breaking research, teaching excellence and commitment to sustainable living, we are changing lives for the better.

The University of Derby is a modern university with a modern outlook. Everything we do is driven by delivering excellence and opportunities for our students, our staff and our region.

We have some of the best university facilities in the UK and achieve outstanding results for our teaching and research and have been awarded Gold in the prestigious Teaching Excellence Framework (TEF) 2023 - making it one of the top universities in the country recognised for its outstanding student experience and student outcomes.

Financially strong and seriously ambitious we offer our employees an inclusive culture that centres itself around staff wellbeing, where you can be confident you will receive all the help and encouragement you need to build a rewarding career with lots of opportunities to enhance your skills.

Digital Solutions & Services are responsible for providing the digital platform to enable the best possible service to staff, students and stakeholders across the University and beyond. We take a collaborative approach to developing strategic goals to provide a diverse range of information technology and business services designed to support learning, teaching and research at the University of Derby.

We are responsible for ensuring that the University's IT capability is fit for purpose, future focused and able to protect, support and enhance the full breadth of services that will be delivered either on campus or digitally online with contributions across the department. We aim to assist students, teaching staff, support departments and collaborative partners to ensure we are making an impact on the University's current and future digital landscape.

The Endpoint development team are a small team who are responsible for the development and running of a modern desktop and mobile management hybrid infrastructure to manage and secure the student and staff estate of Windows and Apple Mac across the university.

The Senior Engineer will have operational day to day responsibility of the various technologies and platforms required to develop and run the endpoint estate, ensuring their optimum performance, reliability and security. This includes imaging from bare metal, application packaging and deployment, updating, security and endpoint health, reporting and analytics across the estate.

The Senior Engineer will work closely with the second line operations team to ensure the endpoint estate is functioning as needed and work on operational handover as required or work is identified for left shift.

Key responsibilities are, but not limited to

• Ensure the Endpoint estate is well managed and secure and provides the appropriate customer experience
• co-developing key strategies, roadmaps, designs, developing and then implementing / updating services within the team, having key accountability for services
• Document all work
• Assists with sector horizon scanning, benchmarks service against the sector to ensure service is future focussed
• Maintain security of complex hybrid systems through implementing secure strategies, policies and controls and automation where possible
• Owns priority and diagnosis of incidents according to agreed procedures
• Serves as an escalation point within the team and for operations

The ideal candidate will have experience of implementing innovative solutions that are customer and future focused, along with significant experience of managing large-scale mixed estates of endpoints.

This will include:

• Extensive experience of application packaging and deployment
• Proven experience of Microsoft Office 365, Exchange Online, and Azure services e.g. Azure AD Connect, Azure LogicApps, Virtual Machines, Microsoft Lab Services
• Extensive knowledge of configuration / Endpoint management e.g. Intune, Autopilot, Microsoft Configuration Manager, JAMF, Active Directory, Group Policy
• Extensive knowledge of security technologies such as Defender for Endpoint and security baselines
• Excellent knowledge of Windows, MacOS
• Ability to deliver within tight deadlines in a demanding environment
• Attention to detail and determination for excellence
• Passion, energy and enthusiasm for continuous improvement and encourages innovation
• Work with the Team Leader to achieve the strategic objectives of the team:
• Ensure the Endpoint estate is well managed and secure and provides the appropriate customer experience.
• Service ownership / service delivery - co-developing key strategies, roadmaps, designs, developing and then implementing / updating services within the team, ensuring all documentation is in place and service transition is seamless across the various internal teams.
• Works with the endpoint team leader to ensure an excellent student and staff experience across the estate.
• Assists with sector horizon scanning, benchmarks service against the sector to ensure service is future focussed.
• Responsible for solution documentation, which may include training, process development and explanation of standards.
• Responsible for setting standards for hardware, software and configuration management.
• Responsible for ensuring Disaster Recovery and Business Continuity processes are in place and tested where appropriate for the endpoint service.
• Identifying existing processes for development of either new or improved automation or document handover of process to the second line team
• Responsible for assisting with key projects which can be across department.
• Responsible for ensuring monitoring of all services, including predicative and analytics, is available for all services and reporting to the management team.
• Maintain security of complex hybrid systems through implementing secure strategies, policies and controls and automation where possible, with understanding of the principles of least privilege, remediation strategies and knowledge of the threat landscape.
• Owns priority and diagnosis of incidents according to agreed procedures and helps mentor others in this process. Investigates causes of incidents and seeks resolution. Escalates unresolved incidents. Facilitates recovery, following resolution of incidents. Documents and closes resolved incidents according to agreed procedures and ensures lessons learned.
• Initiates and monitors actions to investigate and resolve problems in systems, processes and services. Determines problem fixes / remedies. Assists with the implementation of agreed remedies and preventative measures.
• Serves as an escalation point within the team and for operations (tier 3 support) for highly complex solution resolution, and responsible for root cause analysis.
• Assists in evaluating the impact of proposed or required changes which may be highly complex in nature (internally and by vendors) especially in the areas of hardware, software, performance, maintenance and cost; provide recommendations to management with an impact assessment.
• Work with the Infrastructure Team Managers and Lead Engineers on managing external vendors and suppliers, or escalating where necessary, ensuring vendors are delivering on service and providing best value to the university.
• Working in a team environment to deliver complex solutions to multiple internal and external business units
• Mentors across the Infrastructure and Service Delivery area.
• BSc in Computer Science (or equivalent qualification) or equivalent industry experience.

Experience

• Experience of implementing innovative solutions that are customer and future focused
• Significant experience of managing large-scale mixed estates of endpoints (Windows, MacOS and iOS devices)
• Experience of developing and deploying high level infrastructure and solutions
• Extensive experience of application packaging and deployment
• Extensive experience of application licensing, including configuration of license servers
• Extensive experience of device imaging, bare metal deployments and provisioning, e.g. Autopilot and task sequences
• Extensive experience of Microsoft Active Directory / Entra ID, Intune and Configuration Profiles / Group Policy
• High level of experience and proficiency of PowerShell to script solutions and automations
• Extensive experience of managing the Modern Desktop (Windows 11) and implementing best practice with regard desktop application and patch deployment
• Experience delivering in a high performance multi-disciplinary infrastructure team
• Understanding of project management lifecycle from conception through implementation
• Demonstrated proficiency and technical knowledge of infrastructure technology communications / protocols -TCP/IP and other relevant protocols
• Demonstrated proficiency in analytical and problem-solving skills with ability to correlate cross-platform technologies
• Proven experience of Microsoft Office 365, Exchange Online, and Azure services e.g. Azure AD Connect, Azure LogicApps, Virtual Machines, Microsoft Lab Services
• Proven experience with Microsoft Virtual Desktop or other virtual desktop environments
• Experience of Firewalls, Backup/DR solutions, DHCP, DNS etc.

Skills, knowledge & abilities

• Configuration / Endpoint management e.g. Intune, Autopilot . click apply for full job details