End User Platform Engineer

Job Title: End User Platform Engineer

Reporting to: End User Technology Lead

Direct Reports: None

Hybrid minimum 3 days in the office per week

Why Tokio Marine HCC

Standing still is not an option in the current world of Insurance. TMHCC is one of the worlds leading Specialty Insurers. With deep expertise in our chosen lines of business our unparalleled track record and a solid balance sheet TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit empowering our people and delivering on our commitments are at the core of our customer values along with a desire to grow and provide creative and innovative solutions to our clients.

About Operations

Operations sits at the heart of TMHCC we ensure the smooth running of all business processes from policy administration and claims handling to data technology and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen.

Operations is made up of 7 functions this role sits within: IT

We are the foundation for TMHCCs success - enabling the business to grow compete and innovate through technology security and solution design. From shaping strategy to delivering resilient operations we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas solve meaningful challenges and build fulfilling careers that make a real impact.

Job Purpose:

An experienced endpoint engineer responsible for identifying the underlying causes of vulnerabilities non-compliance and remediation failure across the TMHCC workstation estate. The role will design test and deliver scalable fixes rather than rely on repeated manual intervention.

The EUP Engineer will use Qualys and other approved security data to prioritise risk then apply strong packaging SCCM/MECM PowerShell and endpoint engineering skills to deliver controlled remediation. The role will improve deployment quality endpoint health and operational efficiency by creating repeatable processes automation and clear technical standards.

Direct business interaction is a key part of this role. The postholder will communicate technical risk and remediation plans clearly manage stakeholder expectations and ensure agreed Service Level Agreements quality thresholds and change controls are maintained.

The Service Desk operates on a shift pattern between 08:00 and 18:00 Monday to Friday.

Key Responsibilities:

Own the technical investigation and remediation of complex endpoint vulnerabilities across the workstation estate.

Analyse and prioritise findings from Qualys and other approved security platforms considering technical impact business risk and remediation feasibility.

Perform structured root cause analysis for vulnerabilities failed deployments recurring non-compliance and endpoint health issues.

Design sustainable engineering fixes that remove underlying causes and reduce repeated manual remediation.

Create test peer review and deploy enterprise application packages security updates and configuration changes through Microsoft SCCM/MECM and related endpoint tooling.

Develop and maintain PowerShell automation for detection remediation validation reporting and operational health checks.

Troubleshoot SCCM/MECM client health software distribution content delivery deployment status and patch installation failures.

Use controlled pilot groups technical validation and rollback planning to reduce deployment risk.

Work with the End User Platform and Security teams to agree remediation strategy technical ownership and delivery priorities.

Recommend improvements to packaging standards deployment controls vulnerability workflows reporting and endpoint engineering processes.

Drive automation opportunities that improve remediation speed consistency evidence quality and operational efficiency.

Identify recurring failure patterns and convert findings into permanent engineering actions technical debt items or platform improvements.

Produce clear technical documentation remediation records runbooks knowledge articles and audit evidence.

Provide accurate progress risk and dependency updates for vulnerability compliance and service reporting.

Support remediation across physical workstations laptops and Citrix virtual desktop environments.

Lead complex endpoint problem investigations and provide senior technical guidance to support colleagues.

Apply ITIL best practice across Incident Request Problem and Change management activities.

Perform system administration and advanced troubleshooting within Windows Active Directory Group Policy and Microsoft 365 environments.

Ensure solutions comply with TMHCC security policies technical standards controls and agreed service levels.

Contribute to endpoint strategy and initiatives that improve security reliability and the digital employee experience.

Drive initiatives to improve endpoint reliability security and digital employee experience.

Improve application patch and security configuration deployment success across the managed estate.

Reduce repeat vulnerabilities and failed remediation through effective root cause analysis and permanent fixes.

Increase operational efficiency through automation reusable packaging standards and repeatable processes.

Improve SCCM/MECM client health endpoint compliance and the quality of technical reporting and evidence.

Deliver clear recommendations that lead to measurable improvements in current End User Technology processes.

Deliver strong customer service while supporting wider 2nd line operational priorities.

Skills and Experience Specification:

Experience in Endpoint Engineering Desktop Engineering Endpoint Management or advanced 2nd line support within a medium or large enterprise environment.

Strong experience supporting and engineering Windows 11 enterprise environments.

Demonstrable experience in vulnerability management risk-based prioritisation and endpoint remediation.

Strong Microsoft SCCM/MECM knowledge including application packaging software distribution patching collections deployments reporting and client troubleshooting.

Strong application packaging and deployment experience including testing detection methods dependencies supersedence and rollback planning.

Strong PowerShell skills with the ability to design test troubleshoot and maintain production-ready automation and remediation scripts.

Experience analysing Qualys findings or comparable vulnerability management data and translating results into technical action.

Good experience of Active Directory Group Policy Microsoft 365 and related endpoint technologies.

Strong understanding of endpoint security patch management configuration compliance and change control principles.

Advanced troubleshooting analytical thinking and root cause investigation skills.

Experience improving technical processes defining standards and recommending practical engineering changes.

Excellent stakeholder management written communication and the ability to work independently across technical teams.

What We Offer

The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals.

The Tokio Marine HCC Group of Companies is an equal opportunity employer. Please visit for more information about our companies.