Senior Modern Workplace Engineer

Note for Recruitment Agencies:

We prefer to hire directly and we will be in touch with our PSL Agencies if this role is eligible for release.

We do not accept speculative CVs from agencies. If speculative CVs are sent, no fee will be applicable - please direct all queries to the relevant Resourcing Partner.

Role Title: Senior Modern Workplace Engineer

Business Unit: Group Services

Location: Hybrid working from our Leicester, Hinckley or Solihull offices. Applicants should be within reasonable commuting distance of one of these locations.

Role Overview:

We are looking for a highly skilled Senior Modern Workplace Engineer to join our established Modern Workplace team. This is a senior technical position with responsibility for helping lead, support and continually improve an estate of approximately 9,000 Windows and iOS devices across the business.

This role combines technical leadership with hands-on delivery, offering the opportunity to modernise endpoint management, enhance identity and security controls, and maximise the value of our existing Microsoft technology investments. You will play a key role in shaping our Modern Workplace strategy, driving automation, improving user experience, and supporting the adoption of modern Microsoft capabilities.

Reporting to the Modern Workplace Manager, you will act as a senior technical escalation point while helping define the future direction of our cloud-first workplace environment.

We are a cloud-first organisation with a significant investment in Microsoft technologies and a clear ambition to continue evolving our digital workplace.

You will join a highly capable team and be empowered to introduce new ideas, influence technical direction and drive meaningful improvements rather than simply maintain existing services.

Key initiatives you could help shape include:

• Intelligent and automated endpoint management.
• Greater adoption of Microsoft 365 and Microsoft Copilot capabilities.
• Passwordless authentication and modern identity services.
• Zero Trust security and Conditional Access maturity.
• Cloud-native endpoint management and digital employee experience improvements.

What You’ll Be Doing

• Act as a senior SME and design contributor for Modern Workplace, identity and endpoint security.
• Help shape and deliver the technical roadmap - spot what good looks like, build the case for it, and drive it forward.
• Bring proven best practice to the table and challenge existing approaches where they can be improved.
• Help set standards, governance and documentation, and support colleagues across the team.
• Bring new ideas, tools and automation to modernise how we manage our endpoints, identifying the best approach where one doesn’t yet exist.
• Introduce more proactive, vendor-aware management of our laptop estate - including monitoring for issues and keeping devices current with the right drivers and firmware.
• Design and automate application packaging, deployment and patching so third-party applications stay up to date with minimal manual effort, delivering a smoother, more reliable experience for our users.
• Manage and support an enterprise-scale estate using Microsoft Intune, overseeing the lifecycle of Windows 11, iOS and iPadOS, Microsoft Teams Rooms and macOS devices (where applicable).
• Design, configure and maintain device configuration and security profiles, compliance policies, application deployment, and Windows Update / feature deployment rings.
• Monitor device health, compliance and remediation through Intune analytics and reporting.
• Act as senior technical escalation for complex endpoint issues, providing 3rd line support.
• Build deep, hands-on knowledge of the capabilities we already own across Microsoft 365 and Copilot.
• Drive adoption of these tools, recommending where they can add value and improve the experience for our users.
• Contribute to governance, licensing and access discussions, and help evaluate and implement new Microsoft Modern Workplace capabilities.
• Design, mature and continuously improve Conditional Access policies based on device compliance, identity, risk and application sensitivity.
• Champion Zero Trust and Modern Authentication principles across the estate.
• Advance MFA, passwordless and device-trust / compliance-based access controls.
• Partner with Security to ensure endpoint and identity services meet internal and regulatory requirements, whilst always taking user experience into consideration.
• Manage corporate-owned Apple devices using Microsoft Intune integrated with Apple Business Manager.
• Support the Apple Business Manager environment - device assignment and ownership, Automated Device Enrolment (ADE) integration, and application and license management.
• Administer and support Mobile Application Management (MAM) and App Protection Policies across iOS and Android.
• Configure mobile application deployment, app protection policies and secure access to corporate applications and data.
• Support device recovery, reassignment and redeployment, working alongside suppliers and resellers to maintain enrolment and governance.
• Deliver a consistent, secure and intuitive experience across managed and BYOD platforms.
• Maintain standards, technical documentation, processes and support runbooks.
• Ensure changes align with ITIL Incident, Change and Problem Management practices.
• Act as a technical SME within projects and transformation programmes.
• Support audits, compliance activities and security reviews relating to endpoint management, identity and access management.

About You:

• Strong, proven hands-on experience with Microsoft Intune at enterprise scale.
• A track record of introducing automation and better processes to endpoint and application management.
• Deep expertise in Conditional Access, Modern Authentication and Zero Trust principles.
• Strong working knowledge of Microsoft Entra ID and Windows Autopilot.
• Experience managing Windows and iOS devices across a large estate.
• Microsoft Defender for Endpoint and device compliance / endpoint security experience.
• PowerShell scripting and automation.
• Excellent troubleshooting, communication and stakeholder engagement skills.
• Comfortable working within structured change and governance processes.

Desirable

• Experience of application packaging and third-party patch automation tooling.
• Apple Business Manager; Netskope Secure Web Gateway and/or Private Access.
• MD-102 and/or ITIL certification; MECM Co-Management; KQL.
• Experience managing macOS through Intune and supporting Microsoft Teams Rooms.

What We Can Offer in Return:

With an impressive order book of over £4.1 billion we are one of the industry’s leading principal contractors, affording you the opportunity to work on some of the UK’s most exciting projects offering you stability as well as the chance to stretch your capabilities and realise long held career goals. You will be joining diverse teams working at a high professional level with exceptional levels of commitment. With an ambitious strategy, we’re poised for further growth and success, so if you’re committed, talented and enthusiastic, Galliford Try is the right place for you.

We are committed to maintaining the physical and mental wellbeing of all our people, through our ‘Be Well’ programme which offers discounts on certain products, advice and support for a range of issues.

We invest in high-quality training for employees of all levels, from our leadership development framework to our apprenticeship programmes. Through our Career Paths initiative, individuals receive tailored training and support to fulfil their potential.

Our industry is all about creating talented teams that excel in their areas of expertise. As an employer, we know you are most motivated to give your best when you feel valued and engaged.

Our Agile Working programme empowers you with flexibility in when, where and how you work. Where appropriate, site and office-based employees can take advantage of a wide variety of working practices, offering different amounts of structure, regularity and flexibility to suit your needs as well as those of your wider team.

Our Benefits:

We put our people first and our benefits package reflects that by offering a comprehensive range of attractive options to help support your career on top of a competitive salary.

• Generous holiday entitlement, increasing with years of service, plus the opportunity to purchase further holidays
• A wide range of corporate discounts
• Cycle to Work schemes
• Comprehensive pension plan
• Regular Save as You Earn share purchase scheme
• Private medical scheme options are available for all salaried employees and our employee assistance programme also provides free 24/7 support to those who need it
• Paid for yearly membership to one recognised professional association relevant to your role

About us:

Galliford Try is one of the UK’s leading construction groups with a vision to continuously be a people-orientated, progressive business, driven by our values to deliver lasting change for our stakeholders and the communities we work in.

Our purpose is to improve people’s lives through building the facilities and infrastructure that communities need, providing opportunities for our people to learn, grow and progress, working with our supply chain to promote the very best working practice and caring for the environment in which we work.

We do this by holding true to our values, delivering excellence for our clients and the community, being passionate about our role in providing vital services, putting integrity at the heart of our business by doing the right thing, and collaborating with our clients, supply chain and stakeholders to deliver lasting change and long-term value.

For more information on this role or to enquire about other positions available within our Specialist Services business please contact [email protected]

Additional Information:

Galliford Try welcomes applications from candidates who would like to work full-time, reduced hours or flexibly and this will be discussed in more detail as part of the recruitment process.

We encourage, and would be grateful if, you could confirm any requirements we can reasonably fulfil to make this application a positive experience for you.

Don’t meet every requirement of the role? Studies have shown that some people are less likely to apply for jobs unless they meet every single qualification. At Galliford Try, we are committed to building a diverse, inclusive and authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every requirement of the role, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

As a Disability Confident employer, we have committed to offer an interview to any candidate with a long-term health condition or disability that meet the essential criteria for the advertised position. Please contact the Resourcing Partner listed within the job advert if you believe this applies to you. We will also take the opportunity to discuss any adjustments required for your interview.