End User Platform Engineer

Job Title: End User Platform Engineer

Reporting to: End User Technology Lead

Direct Reports: None

Hybrid, minimum 3 days in the office per week

Why Tokio Marine HCC?

Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen.

Operations is made up of 7 functions, this role sits within: IT

We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact.

Job Purpose:

An experienced endpoint engineer responsible for identifying the underlying causes of vulnerabilities, non-compliance and remediation failure across the TMHCC workstation estate. The role will design, test and deliver scalable fixes rather than rely on repeated manual intervention.

The EUP Engineer will use Qualys and other approved security data to prioritise risk, then apply strong packaging, SCCM/MECM, PowerShell and endpoint engineering skills to deliver controlled remediation. The role will improve deployment quality, endpoint health and operational efficiency by creating repeatable processes, automation and clear technical standards.

Direct business interaction is a key part of this role. The postholder will communicate technical risk and remediation plans clearly, manage stakeholder expectations and ensure agreed Service Level Agreements, quality thresholds and change controls are maintained.

The Service Desk operates on a shift pattern between 08:00 and 18:00, Monday to Friday.

• Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.
• Analyse and prioritise findings from Qualys and other approved security platforms, considering technical impact, business risk and remediation feasibility.
• Perform structured root cause analysis for vulnerabilities, failed deployments, recurring non-compliance and endpoint health issues.
• Design sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.
• Create, test, peer review and deploy enterprise application packages, security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.
• Develop and maintain PowerShell automation for detection, remediation, validation, reporting and operational health checks.
• Troubleshoot SCCM/MECM client health, software distribution, content delivery, deployment status and patch installation failures.
• Use controlled pilot groups, technical validation and rollback planning to reduce deployment risk.
• Work with the End User Platform and Security teams to agree remediation strategy, technical ownership and delivery priorities.
• Recommend improvements to packaging standards, deployment controls, vulnerability workflows, reporting and endpoint engineering processes.
• Drive automation opportunities that improve remediation speed, consistency, evidence quality and operational efficiency.
• Identify recurring failure patterns and convert findings into permanent engineering actions, technical debt items or platform improvements.
• Produce clear technical documentation, remediation records, runbooks, knowledge articles and audit evidence.
• Provide accurate progress, risk and dependency updates for vulnerability, compliance and service reporting.
• Support remediation across physical workstations, laptops and Citrix virtual desktop environments.
• Lead complex endpoint problem investigations and provide senior technical guidance to support colleagues.
• Apply ITIL best practice across Incident, Request, Problem and Change management activities.
• Perform system administration and advanced troubleshooting within Windows, Active Directory, Group Policy and Microsoft 365 environments.
• Ensure solutions comply with TMHCC security policies, technical standards, controls and agreed service levels.
• Contribute to endpoint strategy and initiatives that improve security, reliability and the digital employee experience.
• Drive initiatives to improve endpoint reliability, security and digital employee experience.
• Improve application, patch and security configuration deployment success across the managed estate.
• Reduce repeat vulnerabilities and failed remediation through effective root cause analysis and permanent fixes.
• Increase operational efficiency through automation, reusable packaging standards and repeatable processes.
• Improve SCCM/MECM client health, endpoint compliance and the quality of technical reporting and evidence.
• Deliver clear recommendations that lead to measurable improvements in current End User Technology processes.
• Deliver strong customer service while supporting wider 2nd line operational priorities.

• Experience in Endpoint Engineering, Desktop Engineering, Endpoint Management or advanced 2nd line support within a medium or large enterprise environment.
• Strong experience supporting and engineering Windows 11 enterprise environments.
• Demonstrable experience in vulnerability management, risk-based prioritisation and endpoint remediation.
• Strong Microsoft SCCM/MECM knowledge, including application packaging, software distribution, patching, collections, deployments, reporting and client troubleshooting.
• Strong application packaging and deployment experience, including testing, detection methods, dependencies, supersedence and rollback planning.
• Strong PowerShell skills with the ability to design, test, troubleshoot and maintain production-ready automation and remediation scripts.
• Experience analysing Qualys findings, or comparable vulnerability management data, and translating results into technical action.
• Good experience of Active Directory, Group Policy, Microsoft 365 and related endpoint technologies.
• Strong understanding of endpoint security, patch management, configuration compliance and change control principles.
• Advanced troubleshooting, analytical thinking and root cause investigation skills.
• Experience improving technical processes, defining standards and recommending practical engineering changes.
• Excellent stakeholder management, written communication and the ability to work independently across technical teams.

The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful, dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals.

The Tokio Marine HCC Group of Companies is an equal opportunity employer. Please visit www.tmhcc.com for more information about our companies.