SOE & Application Packaging Engineer

What success looks like in this role:

Senior Systems Engineer (SOE/Packaging) with deep expertise in Windows 11 SOE lifecycle enterprise application packaging and endpoint management in hybrid and cloud environments. The role requires a Subject Matter Expert who can lead design implementation governance and continuous improvement of SOE and application packaging processes with a strong alignment to Essential Eight controls and security standards. NV1 security clearance is mandatory.

Responsibilities and Accountabilities

SOE Solution Design Implementation and Maintenance

• Design build and maintain Windows 11 SOEs using MECM/SCCM & Intune (co-management and full cloud).
• Lead hybrid and cloud-only Intune deployments including Autopilot and Group Policy migration into Intune.
• Run pilot/ringed deployments; analyze telemetry; refine ESP and post-provisioning tasks.
• Customize SOEs for business personas and VDI/AVD images (Nerdio Preferred Not Mandatory).
• Manage hardware evaluation integration and ongoing compatibility.
• Engineer and administer Windows Update for Business policies and feature/update rings.
• Airlock administration and management for secure application packaging and SOE processes.

Application Packaging and Release Management

• Package test and maintain MSI/MSIX/App-V applications with robust detection rollback and version control.
• Own packaging standards dependencies and deployment rings.
• Operate MECM/Intune for software distribution compliance patch orchestration and hybrid deployments.
• Knowledge of Papercut administration and management (preferred).

Documentation & Skills Transfer

• Produce As-Built/As-Configured/SOPs/runbooks; provide structured knowledge transfer to L2/L3 teams.
• Maintain packaging catalog release notes change records and configuration baselines.

Application OS Patching and Hardening (Security Focus)

• Embed ASD Essential Eight controls into SOE and packaging workflows.
• Administer and integrate Defender BitLocker WDAC/AppLocker and other baselines.
• Provide audit evidence manage exceptions and report on security posture.
• Manage certificate renewals and related dependencies within Intune/Hybrid environments.

You will be successful in this role if you have:

• 35 years SOE engineering & enterprise packaging (MSI/MSIX/App-V).
• Expert in MECM/SCCM Intune (hybrid and full cloud) Autopilot AVD/FSLogix.
• Strong knowledge of Group Policy setup in Intune hybrid Intune environments and policy migration.
• Application Whitelisting knowledge Airlock administration and secure packaging workflows.
• PowerShell automation for packaging validation and compliance health checks.
• ServiceNow experience (preferred).
• Familiarity with Nerdio AVD management and Papercut administration desirable.
• Experience in government/regulated environments (ISM/PSPF/E8 alignment).
• Clear documentation skills ITIL-aligned change/release processes and strong stakeholder communication.

Mobile Device & Certificate Management

• Manage iPhone/iOS devices in Intune including enrolment compliance and policy deployment.
• Certificate management on Apple Business Manager/Apple Push Notification service (APNs).
• Manage certificate renewals and related dependencies within Intune/Hybrid environments.

Certifications (preferred/desirable)

• MD-102 (Modern Desktop Administrator Associate)
• AZ-140 (Configuring and Operating Microsoft Azure Virtual Desktop)
• ITIL v4 Foundation

Security Clearance

• NV1 (mandatory)

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age caste citizenship color disability family medical history family status ethnicity gender gender expression gender identity genetic information marital status national origin parental status pregnancy race religion sex sexual orientation transgender status veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein or cannot otherwise complete your expression of interest without additional assistance and would like to discuss a request for reasonable accommodation please contact our Global Recruiting organization at or alternatively Toll Free: (Prompt 4). US job seekers can find more information about Unisys EEO commitment here.