Workplace Engineer

Role Overview

The Workplace Engineer / Packaging SME is responsible for engineering, maintaining, and evolving the enterprise digital workplace environment, with a deep focus on modern application packaging, software lifecycle management, and automation.
This role ensures that end user devices are secure, reliable, and optimized, delivering a seamless and high performing user experience across the organization.

The ideal candidate combines strong technical skills in application packaging and deployment with broad expertise in Intune, SCCM, Windows system engineering, and modern endpoint management.

Key Responsibilities

Application Packaging & Software Delivery

• Build, package, and maintain applications using MSI, MSIX, IntuneWin, and scripted installers (PowerShell).

• Perform compatibility testing, dependency resolution, and application readiness validation.

• Maintain packaging standards, naming conventions, versioning, and documentation.

• Automate packaging pipelines using PowerShell and CI/CD (Azure DevOps, GitHub Actions, etc.).

• Manage application deployments via Microsoft Intune and/or Microsoft Endpoint Configuration Manager (MECM/SCCM).

• Troubleshoot packaging issues, installation failures, and application conflicts.

• Liase with relevant Application owners and vendors

• Provide support to packaging vendor

Endpoint Engineering

• Develop, maintain, and improve Windows 10/11 device configurations and baselines.

• Engineer, test, and deploy new Workplace technologies such as: 

• Windows Autopilot

• Intune device configuration + compliance policies

• Microsoft Defender for Endpoint

• Windows Update for Business (WUfB) / Feature Update Rings

• Optimize login performance, device health, OS stability, and user experience.

• Implement modern management and co-management strategies.

Automation & Scripting

• Create and maintain automation scripts in PowerShell for: 

• Intune management

• Software deployment

• Endpoint remediation

• OS configuration

• Application lifecycle management

• Contribute to shared script repositories and drive automation maturity.

Operations & Support (Tier 3)

• Act as the SME for app packaging-related escalations.

• Support major Workplace incidents affecting desktop/app performance.

• Collaborate with security, networking, identity, and other infrastructure teams.

Governance, Compliance & Security

• Ensure packaged apps meet organizational and regulatory security standards.

• Manage code signing certificates and packaging trust requirements.

• Providing Patching for Application vulnerability.

• Support compliance efforts (CIS, NIST, ISO27001, etc.).

Project Delivery

• Lead or contribute to Workplace transformation projects, such as: 

• OS version upgrades

• Application modernization (EXE → MSI/MSIX)

• Zero touch provisioning / Autopilot rollout

• Legacy remediation and vendor coordination

Required Skills & Experience

• 4+ years in Workplace Engineering, End User Computing, or IT Operations.

• Advanced experience with: 

• Application Packaging Tools (Admin Studio, PSADT, MSIX Packaging Tool, Advanced Installer, Orca, Patch My PC, etc.)

• PowerShell (advanced scripting and automation)

• Microsoft Intune (Apps, Win32 deployments, device config, compliance)

• SCCM/MECM (optional if Intune only environment)

• Strong understanding of Windows internals, registry, services, file systems, event logs.

• Experience troubleshooting app installs with tools like: 

• Process Monitor

• Process Explorer

• CM Trace

• Event Viewer

• Familiarity with CI/CD pipelines (Azure DevOps, GitHub)

• Knowledge of ITIL processes (Change, Incident, Problem)

• Excellent communication and documentation skills.

Your benefits:

• Flexible Work Hours
• Hybrid working model (Mon & Fri WFH)
• Medical Insurance
• Parental leave Policy
• On-site crèche facility
• Annual Health Check-up
• Employee Assistance Program