- 12 months + 2x12 months
- Canberra location
- Baseline Security Clearance

As a Senior End User Computing (EUC) Engineer, you will provide Level 3 engineering, automation and operational support across the department's end-user computing platforms and services. This role has a strong focus on engineering, automation and service modernisation through Azure DevOps, Azure Pipelines, Microsoft Purview Information Protection (MPIP) and PowerShell.

You will work closely with technical teams and stakeholders across the department to deliver secure and reliable end-user services, improve operational efficiency through automation, and provide expert technical advice on supported platforms and technologies. The role requires a high degree of technical expertise, initiative and problem-solving capability, together with strong communication and stakeholder engagement skills.

Key duties and responsibilities

- Independently design, engineer, maintain and provide Level 3 support for complex end-user computing platforms, including the SOE, corporate devices, productivity services and remote access.
- Develop and support automation, deployment pipelines and configuration-as-code solutions using Azure DevOps, Azure Pipelines, Git and PowerShell, including automated deployment of Microsoft Purview Information Protection controls.
- Plan and implement upgrades, migrations, application deployments, patching and service changes across non-production and production environments.
- Monitor application, endpoint, platform and end-to-end service health, capacity and performance; proactively identify issues, diagnose root causes and implement sustainable remediation.
- Apply independent technical judgement to produce designs, evaluate options, manage technical risks and resolve complex issues.
- Work collaboratively with other technical teams, vendors, and Level 1 and Level 2 support staff to deliver changes,



resolve incidents and improve support outcomes.
- Produce and maintain technical designs, implementation and test plans, operational procedures and support documentation, and uplift team knowledge through guidance, knowledge transfer and technical support where required.

The role responsibilities broadly apply to the following:
- Endpoint and Standard Operating Environment: Windows 11, Windows Server components supporting EUC services, Microsoft Intune, Microsoft Configuration Manager, Group Policy, Windows Autopilot, iOS and iPadOS device management, Apple Business Manager, BitLocker, Microsoft Defender for Endpoint, Microsoft Defender XDR and related monitoring and management tools.
- Application Control, Hardening and Essential 8 controls: Microsoft Defender, application whitelisting and execution control technologies, attack surface reduction (ASR) rules, Microsoft Office macro security controls and implementation of ACSC and vendor hardening guides for operating systems and applications.
- Azure Virtual Desktop and remote access: Azure Virtual Desktop host pools and published applications, Azure Monitor and Log Analytics, FSLogix, and enterprise VPN services.
- DevOps, automation and configuration as code: Azure DevOps, Azure Pipelines, PowerShell, and deployment automation across non-production and production environments.
- Information protection and compliance: Microsoft Purview Information Protection, sensitivity labels, label policies and Data Loss Prevention configurations.
- Productivity, messaging and collaboration:



Microsoft 365 Apps for enterprise, Exchange Server, Exchange Online, Microsoft Teams, OneDrive for Business and associated administrative services.
- Application and patch management: application packaging and deployment technologies, Microsoft Intune, Microsoft Configuration Manager, Patch My PC, Windows Update services, Microsoft 365 Apps servicing channels, vulnerability remediation, and patch governance aligned to Essential 8 and organisational security requirements.

Essential criteria

1. Demonstrated expert, hands-on experience with Azure DevOps and Azure Pipelines, including source control, branching and pull-request practices, deployment stages, approvals, variables, service connections, troubleshooting and controlled releases across non-production and production environments.
2. Demonstrated hands-on experience administering and engineering Microsoft Purview Information Protection, including sensitivity labels, label policies and Data Loss Prevention configurations, together with the automation, testing, deployment and ongoing support of these capabilities.
3. Demonstrated experience managing and configuring Azure Virtual Desktop in an enterprise environment. Expert knowledge of Windows 11, Microsoft Intune and Group Policy, including configuration, compliance, MDM/MAM, application deployment, patching and Standard Operating Workplace management.
4. Demonstrated experience managing Microsoft 365 Apps for enterprise, including servicing profiles, update channels, deployment.
5. Demonstrated ability to produce high-quality technical designs, standard operating procedures, implementation plans and operational documentation.

Desirable criteria

1. Experience with Australian Government IT Cyber Security processes including ISM, Essential 8 and ACSC hardening guides.
2. Experience with Exchange, Exchange Online

📌 Senior EUC Egineer (Canberra)
🏢 Ntt Data
📍 Canberra