Desktop Engineer

Senior Desktop Engineer

Location: London (Hybrid – 4 days onsite)

Employment: Permanent

About the Role

Our client is a global investment management firm looking for a Senior Desktop Engineer to join a small, highly technical IT team supporting users across international offices. This is a hands-on role combining 2nd and 3rd line support, endpoint engineering and systems administration. You will provide high-quality technical support to approximately 275 users, including senior executives, portfolio managers, traders and other front-office teams, while also taking ownership of key infrastructure and endpoint technologies.

The environment is modern and predominantly Microsoft and Azure-focused, with a strong emphasis on Intune, Azure Virtual Desktop, Okta, CrowdStrike, Microsoft 365 and endpoint security. The successful candidate will be comfortable working in a fast-paced environment where issues need to be resolved quickly, while maintaining a high level of attention to detail, security and documentation.

Key Responsibilities

End-User & Executive Support

• Provide 2nd and 3rd line technical support across London and wider international offices.
• Deliver a high-quality, white-glove support service to senior executives, portfolio managers, traders and other front-office users.
• Support trading-floor and market-data environments, including desktop and Bloomberg-related issues.
• Own ticket triage, prioritisation and resolution, ensuring issues are properly documented and closed with appropriate root-cause information.
• Troubleshoot Windows, Microsoft 365, hardware, applications, networking and collaboration technologies.
• Manage joiner, mover and leaver processes, including account provisioning, hardware, Intune, Okta and Microsoft 365.
• Maintain accurate asset records and support documentation.
• Provide support for video conferencing, telephony and AV technologies across the office.

Endpoint Engineering

• Administer and maintain Microsoft Intune across Windows 11 endpoints.
• Manage Autopilot, compliance policies, configuration profiles, application deployment and endpoint configuration.
• Support and maintain AppLocker policies.
• Own the monthly endpoint patching process, including testing, staging, deployment and reporting.
• Administer and support Azure Virtual Desktop environments, including host pools, images and user experience.
• Support endpoint security technologies including CrowdStrike.
• Use PowerShell and Microsoft Graph to automate repetitive tasks and improve operational efficiency.

Infrastructure & Cloud

• Support the wider infrastructure environment alongside senior engineers and technology partners.
• Work with Azure across areas including compute, networking, storage, monitoring and disaster recovery.
• Support Okta administration, including SSO, MFA, application integrations and lifecycle management.
• Assist with Cato SASE, Meraki networking and SecureW2.
• Support backup and recovery technologies, including monitoring, restores and recovery testing.
• Contribute to Microsoft 365 administration across Exchange Online, SharePoint, Teams, security and compliance.
• Participate in infrastructure projects, improvements and disaster recovery testing.

Security & Compliance

• Triage and investigate endpoint security alerts, including CrowdStrike detections.
• Support the implementation and enforcement of information security policies across endpoints and identity platforms.
• Administer security awareness and phishing programmes.
• Maintain appropriate documentation and evidence for audits, client due diligence and regulatory requirements.
• Follow change management, security and operational controls across all technical activities.

Offices & Vendors

• Support office technology, AV, connectivity and physical infrastructure where required.
• Assist with office moves, hardware deployments and infrastructure changes.
• Work with MSPs, ISPs and technology vendors to resolve issues and deliver services effectively.
• Provide remote support to international offices and occasional travel where required.

Skills & Experience

• 4+ years' experience in IT support, desktop engineering or systems administration.
• Strong hands-on experience with Microsoft Intune, Microsoft 365 and Windows 10/11.
• Good working knowledge of Azure fundamentals, including compute, networking and identity.
• Experience with several of the following: Okta, Azure Virtual Desktop, CrowdStrike, Cato, Meraki, AppLocker, Rubrik or equivalent technologies.
• Strong PowerShell skills, including the ability to write, troubleshoot and improve scripts.
• Solid networking fundamentals covering TCP/IP, DNS, DHCP, VLANs, wireless and VPN.
• Experience supporting senior stakeholders and demanding users in a fast-paced environment.
• Strong troubleshooting, analytical and problem-solving skills.
• Excellent communication skills with both technical and non-technical users.
• Financial services, investment management, asset management or buy-side experience is highly desirable.

Personal Attributes

• Strong sense of ownership and accountability.
• Able to prioritise effectively and respond quickly to business-critical issues.
• High attention to detail, particularly when making changes to production environments.
• Naturally curious and keen to develop deeper infrastructure and cloud expertise.
• Comfortable working independently while collaborating closely with a small technical team.
• Calm, professional and service-focused when supporting senior stakeholders.
• Willing to investigate problems thoroughly rather than simply resolving the immediate symptom.

Desirable

• Microsoft certifications such as MD-102 or AZ-104.
• Okta certification or equivalent identity-management experience.
• Microsoft Graph, Python or other automation experience.
• Experience supporting Bloomberg or other market-data platforms.
• Experience working within trading-floor environments.
• Knowledge of structured cabling, AV systems or office infrastructure.
• Experience working with MSPs and third-party technology providers.