Job Description:

Role Overview

A senior, multiskilled engineer responsible for the design, deployment, optimisation, and day-to-day operation of enterprise endpoint-management and Windows platforms. The role spans Windows client and Server OS build and lifecycle, Remote Desktop Services (RDS) and RDP remote-access management, patch management and compliance (WSUS, SCCM/MECM, and Ivanti), software packaging and deployment, OS deployment (OSD), and supporting Windows Server and virtualisation environments. As a Level 10 specialist, the engineer provides advanced troubleshooting and strategic guidance, leads root-cause analysis for major incidents, drives automation, and mentor junior (L1/L2) team members — working within ITIL-aligned service delivery and corporate security standards.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Please note this role will require attendance on-site 5 days a week.

Key Responsibilities

Windows Server & Remote Desktop Services (RDS / RDP)

• Design, build, configure, patch, and maintain enterprise Windows Server platforms — including Windows Server 2016/2019/2022 and 2025 — covering Active Directory, GPO, DNS, and DHCP.

• Manage and support Remote Desktop Services (RDS) — Session Host, Connection Broker, Gateway, Web Access, and Licensing — including farm design, session management, and user-profile/FSLogix configuration.

• Administer, secure, and troubleshoot the Remote Desktop Protocol (RDP) — connectivity, certificates, encryption/NLA, Group Policy controls, and remote-access performance.

Endpoint Management — SCCM/MECM, WSUS & Ivanti

• Design, implement, and maintain the SCCM/MECM hierarchy (Primary/Secondary sites, Distribution Points, Management Points, Software Update Points); define and enforce policies, standards, and operating procedures.

• Administer WSUS and Software Update Points; manage Ivanti (and comparable endpoint/patch-management platforms) for patching, software distribution, and endpoint control.

• Monitor site/endpoint health and client status; maintain boundaries, collections, and client settings; perform site backup and disaster-recovery validation.

Patch Management & Compliance

• Plan and execute enterprise patching strategies for Windows client/Server OS, Office, and third-party applications using WSUS, SCCM ADRs, and Ivanti.

• Configure, test, and deploy Automatic Deployment Rules (ADRs) and Compliance Baselines; monitor compliance reports and remediate non-compliant endpoints and servers.

• Collaborate with IT Security to align patching with corporate security policies and vulnerability-remediation targets.

Software Deployment & Application Packaging

• Package, test, and deploy applications across enterprise endpoints and RDS hosts using SCCM task sequences; automate deployments with PowerShell and advanced techniques.

• Resolve deployment issues including application conflicts and installation failures; maintain software inventory, license tracking, and reporting.

Operating System Deployment (OSD) & Windows Lifecycle

• Manage Windows OS imaging, boot images, driver packages, and task sequences; lead in-place upgrades, bare-metal deployments, and device/server refresh cycles.

• Maintain a library of standardised enterprise images (client and Server) aligned with IT standards; optimise OSD workflows for reliability and minimal downtime.

Automation, Reporting & Incident Leadership

• Drive automation for patching, provisioning, monitoring, and compliance using PowerShell (and tools such as Ansible/PowerCLI where applicable).

• Develop SQL queries and SSRS reports for inventory, compliance, deployment, and patch status; track KPIs (patch-compliance rate, deployment success rate, client/server health).

• Lead root-cause analysis for major incidents across Windows, RDS, and endpoint environments; mentor L1/L2 engineers and maintain accurate documentation (CMDB integrity, runbooks).

Technical Skills & Experience

Essential:

• Advanced Windows Server administration — Windows Server 2016/2019/2022 and 2025 — including Active Directory, GPO, DNS, and DHCP.

• Hands-on management of Remote Desktop Services (RDS) — Session Host, Connection Broker, Gateway, Web Access, Licensing — and the Remote Desktop Protocol (RDP), including secure configuration and troubleshooting.

• Proficient in Windows client OS, networking, and endpoint security.

• Expert knowledge of SCCM/MECM — hierarchy, client deployment, site maintenance, task sequences, ADRs, and compliance baselines.

• WSUS administration and enterprise patch management.

• Ivanti (or comparable endpoint/patch-management platform) for patching and software/endpoint control.

• PowerShell scripting for automation and troubleshooting; advanced SQL and SSRS reporting.

• Must have DV Clearance

Desirable:

• FSLogix / user-profile management and VDI exposure; RDS farm scaling and load-balancing.

• Software packaging tools (AdminStudio, Wise, App-V); monitoring tools for large SCCM infrastructures.

• Windows Server virtualisation (VMware vSphere/vCenter, Hyper-V, or Nutanix) and automation (Ansible, PowerCLI).

• Security baselines (e.g. CIS) and system-hardening / ITSM compliance experience.

Qualifications & Certifications

• Bachelor’s degree in IT, Computer Science, Engineering, or related field (or equivalent experience).

• Typically 4–8+ years in Windows Server/OS, SCCM/MECM administration, and endpoint/patch management.

• Desirable: Microsoft Certified (e.g. Windows Server Hybrid Administrator Associate / endpoint-management credentials), Ivanti product certification, and ITIL Foundation.

• English proficiency to a high professional standard.

Professional Attributes

• Strong analytical and problem-solving skills for large-scale deployments.

• Clear written and verbal communication with technical and non-technical stakeholders.

• Automation-first, continuous-improvement mindset; strong documentation and knowledge-sharing habits.

• Able to mentor junior engineers and act as an escalation point under pressure.

 

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.