Deployment Engineer

Deployment Engineer -

ELH Device Rollout (OT Environment)

Job Description

Role Summary

·The Deployment Engineer will

support the rollout of ELH laptops across Thames Water OT and Field Operations

teams.

·The role focuses on SCCM-based

device build execution, post-build validation, logistics coordination, end-user

handover, and embedded hypercare support.

·The engineer will work within a

resource-based delivery model aligned to ELH governance, readiness criteria,

stage gates, and wave-based rollout sequencing.

·The role is execution-focused,

with ownership for image design, Task Sequence design, application packaging,

security controls, and root-cause fixes remaining with Thames Water teams.

Key Responsibilities

·Execute laptop builds using

Thames Water-approved SCCM images and Task Sequences, including build

initiation, monitoring, completion checks, and build evidence capture.

·Perform post-build validation

and functional checks before end-user handover, including application

availability, network connectivity, VPN validation, and device readiness

checks.

·Coordinate device staging,

packaging, labelling, distribution, old-device collection, secure return

coordination, and chain-of-custody tracking across agreed deployment locations.

·Support structured end-user

handover, including user login validation, MFA setup, application access

validation, handover documentation, and user acknowledgement capture.

·Maintain accurate deployment

records, asset updates, validation checklists, handover documents, issue logs,

escalation trackers, and audit-ready operational evidence.

·Provide L0/L1 hypercare support

during Trial and Rollout phases, acting as the initial point of contact for

deployment-related user issues and queries.

·Triage, categorise, track, and

escalate build, infrastructure, application, network, VPN, or security-related

issues to the appropriate Thames Water teams for L2/L3 resolution.

·Create and maintain knowledge

base articles for common deployment-related L0/L1 issues to support BAU

transition and ongoing support readiness.

·Provide regular deployment

reporting covering progress, volumes, issues, risks, dependencies, throughput,

and forward plan.

·Collaborate with ELH

governance, OT Compute, OT Network, EUC teams, BAU support teams, logistics

teams, and end users to ensure controlled and traceable deployment delivery.

Must-to-Have Skills

·Hands-on experience in laptop /

endpoint deployment, build execution, imaging, validation, and rollout support.

·Working knowledge of SCCM /

MECM build execution, PXE boot, approved Task Sequences, and Windows OS

deployment processes.

·Ability to perform functional

validation across device readiness, Microsoft 365 access, application

availability, VPN setup, network connectivity, and user login validation.

·Experience with end-user

handover, MFA setup support, issue handling, and first-line deployment

hypercare.

·Strong experience maintaining

deployment records, validation evidence, asset records, chain-of-custody logs,

handover artefacts, issue logs, and escalation records.

·Experience logging, tracking,

triaging, and escalating issues through ITSM processes and tools such as

ServiceNow.

·Ability to operate in secure,

governed, readiness-driven environments with defined RACI, stage-gate

approvals, and escalation routes.

·Strong coordination skills for

logistics, site readiness, device movement, user scheduling, and deployment

reporting.

Good-to-Have Skills

·Experience working in OT,

utilities, infrastructure, regulated, or security-sensitive environments.

·Exposure to large-scale,

wave-based rollout programmes involving trial, rollout, hypercare, and BAU

handover phases.

·Working knowledge of Active

Directory object coordination, Microsoft licence assignment requests, security

group validation, and endpoint tracking processes.

·Familiarity with VPN clients

such as Ivanti VPN, endpoint security tools such as Symantec EPP, and device

tracking systems such as Absolute.

·Experience creating knowledge

base articles and supporting BAU handover, issue closure, asset reconciliation,

and final reporting activities.

·Understanding of audit-ready

documentation, chain-of-custody controls, operational reporting, and deployment

governance.

Qualifications

·Diploma or bachelor’s degree in

Information Technology, Computer Science, Engineering, or a related technical

discipline, or equivalent hands-on experience.

·Relevant experience in desktop

engineering, field services, endpoint deployment, IT operations, or device

rollout support.

·Experience supporting

enterprise IT deployment programmes and working with technical teams, service

teams, and end users in controlled environments.

·Experience in deployment

validation, end-user support, incident tracking, documentation, and operational

reporting.

Certifications

·Microsoft Endpoint

Configuration Manager, Microsoft Intune, Windows deployment, or equivalent

endpoint management certification preferred.

·ITIL Foundation or equivalent

IT service management certification preferred.

·Security clearance eligibility

may be required. The engagement requires at least one SC-cleared resource for

secure access activities.

·Additional Microsoft 365,

Windows client, networking, or endpoint support certifications would be

advantageous.

Soft Skills

·Clear communication with end

users, technical teams, governance stakeholders, and BAU support teams.

·Attention to detail and strong

ownership of documentation, evidence quality, asset accuracy, and audit

readiness.

·Structured problem-solving and

disciplined issue triage with appropriate escalation judgement.

·Adaptability in a flexible,

readiness-based rollout model where sequencing, throughput, and deployment

timelines may change.

·Customer-focused approach

during user handover and hypercare support.

·Collaborative working style

across OT Compute, OT Network, EUC, ELH governance, logistics contacts, and

field users.