End Point Build Engineer

Location: Reading Rate: £240Per Day Inside IR35 Contract: Three - Six Months SC Clearance is essential. Applicants without live SC Clearance will not be progressed The Role I am working with a longstanding client with whom we have completed numerous contract and project assignments over the last three years. After 30 years in the sector they have carved out a fantastic reputation for quality and providing the very best service to their clients. They are now looking for an End Point Build Engineer to work with one of their clients on a contract basis. As previously stated, SC Clearance is essential for this role and I cannot accept any applications from candidates who do not have live SC Clearance. Responsibilities As an Endpoint Build Engineer, you will own and improve the technical build, provisioning and software-distribution capability for Windows end-user devices on an exciting Government project. You will work with Intune, Autopilot, Entra ID and related Microsoft technologies to deliver secure, repeatable and supportable device builds, with strong emphasis on automation, testing and lifecycle control. Furthermore, you will: Maintain and improve the Windows endpoint build standard, including Intune configuration, Autopilot profiles, compliance policies and approved security baselines. Build, enrol, configure and validate devices for new starters, refresh, replacement and other provisioning demand. Package, test and distribute approved applications using appropriate modern deployment methods and scripting where required. Maintain persona-based application and configuration assignments and support controlled changes through pilot and deployment rings. Troubleshoot complex provisioning, enrolment, application-deployment, policy and compliance issues. Use PowerShell and automation to reduce manual build effort, improve consistency and support zero-touch provisioning where approved. Work closely with Tech Bar, Service Desk, Security, ServiceNow and application teams to maintain accurate asset/configuration records and smooth handover into support. Maintain high-quality technical documentation, build procedures, test evidence, rollback plans and operational knowledge. Support lifecycle activity including new hardware models, firmware/driver changes, refresh planning and controlled retirement of obsolete build components. Skills & Experience Required Typically 3+ years of experience across Service Desk, desktop support, application support or End User Compute, including hands-on L1/L2 troubleshooting. Strong working knowledge of Windows 10/11, Microsoft 365, Teams, Outlook, OneDrive, identity/access and endpoint support. Experience with ITSM tools, incident/request management, queue control, priority handling and SLA-driven support. Ability to troubleshoot independently, gather evidence and escalate with clear technical detail. Experience coaching or mentoring less-experienced analysts and raising team quality. Strong communication and customer ownership, including confidence with senior or demanding users. SC clearance is required. Candidates must hold, or be eligible and willing to obtain and maintain, the required clearance. Desirable Typically 5+ years across endpoint engineering, Modern Device Management, EUC or Microsoft workplace technologies. Strong practical experience with Microsoft Intune, Windows Autopilot, Entra ID and Windows 10/11 endpoint management. Good PowerShell capability and experience automating device-build, reporting or remediation activity. Experience packaging and deploying applications using Win32, MSIX, scripts or comparable enterprise methods. Understanding of endpoint-security controls such as Defender, BitLocker, Conditional Access, configuration/compliance policy and least privilege. Experience with technical testing, change control, documentation and production handover. Relevant Microsoft 365 / Endpoint Administrator certification. Experience with Servi