Senior EUC Windows Desktop Engineer - Modern Workplace | Canberra

Job Description

Senior End User Computing Windows Desktop Engineer \n

Australian citizenship required. Must be able to obtain Baseline security clearance.

\n

Location: Canberra (Onsite).

RFQ Details \n

\n
• RFQ ID: LH-07841
\n
• Agency: Department of Industry, Science and Resources
\n
• Closing Date: Friday, 25 September 2026 • 11:59pm, Canberra time
\n
• Estimated Start Date: Monday, 19 October 2026
\n
• Initial Contract Duration: 12 months
\n
• Extension Term: 12 months
\n
• Number of Extensions: 2
\n
• Experience Level: Senior - EL1 equivalent
\n
• Security Clearance: Must be able to obtain Baseline
\n
• Location of Work: ACT
\n
• Working Arrangements: Onsite. This role is based in Canberra, ACT. Flexible work (WFH) arrangements may be considered on a case-by-case basis in consultation with the supervising manager, subject to business needs, however, this role is not suitable for 100% remote delivery.
\n
• Maximum Hours: 40 hours per week
\n

Job Details \n

As a Senior End User Computing (EUC) Engineer, you will provide Level 3 engineering, automation and operational support across the department's end-user computing platforms and services. This role has a strong focus on engineering, automation and service modernisation through Azure DevOps, Azure Pipelines, Microsoft Purview Information Protection (MPIP) and PowerShell.

\n

This recruitment round is specifically seeking candidates with strong, recent and hands-on experience in Azure DevOps, Azure Pipelines and Microsoft Purview Information Protection. These capabilities are critical to the team's current and future delivery objectives and will be assessed as priority requirements throughout the recruitment process.

\n

You will work closely with technical teams and stakeholders across the department to deliver secure and reliable end-user services, improve operational efficiency through automation, and provide expert technical advice on supported platforms and technologies. The role requires a high degree of technical expertise, initiative and problem-solving capability, together with strong communication and stakeholder engagement skills.

Key Duties and Responsibilities \n

\n
• Independently design, engineer, maintain and provide Level 3 support for complex end-user computing platforms, including the SOE, corporate devices, productivity services and remote access.
\n
• Develop and support automation, deployment pipelines and configuration-as-code solutions using Azure DevOps, Azure Pipelines, Git and PowerShell, including automated deployment of Microsoft Purview Information Protection controls.
\n
• Plan and implement upgrades, migrations, application deployments, patching and service changes across non-production and production environments.
\n
• Monitor application, endpoint, platform and end-to-end service health, capacity and performance; proactively identify issues, diagnose root causes and implement sustainable remediation.
\n
• Apply independent technical judgement to produce designs, evaluate options, manage technical risks and resolve complex issues.
\n
• Work collaboratively with other technical teams, vendors, and Level 1 and Level 2 support staff to deliver changes, resolve incidents and improve support outcomes.
\n
• Produce and maintain technical designs, implementation and test plans, operational procedures and support documentation, and uplift team knowledge through guidance, knowledge transfer and technical support where required.
\n

Technical Skills \n

\n
• Endpoint and Standard Operating Environment: Windows 11, Windows Server components supporting EUC services, Microsoft Intune, Microsoft Configuration Manager, Group Policy, Windows Autopilot, iOS and iPadOS device management, Apple Business Manager, BitLocker, Microsoft Defender for Endpoint, Microsoft Defender XDR and related monitoring and management tools.
\n
• Application Control, Hardening and Essential 8 controls: Microsoft Defender, application whitelisting and execution control technologies, attack surface reduction (ASR) rules, Microsoft Office macro security controls and implementation of ACSC and vendor hardening guides for operating systems and applications.
\n
• Azure Virtual Desktop and remote access: Azure Virtual Desktop host pools and published applications, Azure Monitor and Log Analytics, FSLogix, and enterprise VPN services.
\n
• DevOps, automation and configuration as code: Azure DevOps, Azure Pipelines, PowerShell, and deployment automation across non-production and production environments.
\n
• Information protection and compliance: Microsoft Purview Information Protection, sensitivity labels, label policies and Data Loss Prevention configurations.
\n
• Productivity, messaging and collaboration: Microsoft 365 Apps for enterprise, Exchange Server, Exchange Online, Microsoft Teams, OneDrive for Business and associated administrative services.
\n
• Application and patch management: application packaging and deployment technologies, Microsoft Intune, Microsoft Configuration Manager, Patch My PC, Windows Update services, Microsoft 365 Apps servicing channels, vulnerability remediation, and patch governance aligned to Essential 8 and organisational security requirements.
\n

Selection Criteria Essential criteria \n

\n
• 1.Demonstrated expert, hands‑on experience with Azure DevOps and Azure Pipelines, including source control, branching and pull‑request practices, deployment stages, approvals, variables, service connections, troubleshooting and controlled releases across non-production and production environments.
\n
• 2.Demonstrated hands‑on experience administering and engineering Microsoft Purview Information Protection, including sensitivity labels, label policies and Data Loss Prevention configurations, together with the automation, testing, deployment and ongoing support of these capabilities.
\n
• 3.Demonstrated experience managing and configuring Azure Virtual Desktop in an enterprise environment. Expert knowledge of Windows 11, Microsoft Intune and Group Policy, including configuration, compliance, MDM/MAM, application deployment, patching and Standard Operating Environment management.
\n
• 4.Demonstrated experience managing Microsoft 365 Apps for enterprise, including servicing profiles, update channels, deployment.
\n
• 5.Demonstrated ability to produce high‑quality technical designs, standard operating procedures, implementation plans and operational documentation.
\n

Desirable criteria \n

\n
• 1.Experience with Australian Government IT Cyber Security processes including ISM, Essential 8 and ACSC hardening guides.
\n
• 2.Experience with Exchange, Exchange Online.
\n

How you are paid... \n

You choose what's best for you.

\n

\n
1. PAYG through Pinaka
\n
2. Third-party payroll
\n
3. Self‑employed (own ABN)
   \n With a single, transparent and fixed margin, we ensure compliance to all state and payroll laws. So that is one less thing for you to worry about.
\n

\n

#J-18808-Ljbffr