Senior End User Computing Engineer

About OneArc

We are a well-established team supporting critical global infrastructure and simulation platforms for major defense powers and their allies. We constantly seek ways to advance our operational capabilities using modern automation and enterprise technologies (such as IaC, advanced virtualization, and high-performance networking).

Role Overview

BAE Systems OneArc is looking for an experienced and proactive Senior End-User Computing (EUC) Engineer to join our team in Prague. You will help shape and maintain our end-user technology landscape during a transition from hybrid-joined devices to a modern, cloud-managed model. You will be responsible for our Windows environment, and help us move from on-premises Active Directory towards Microsoft Entra ID and Intune. If you have deep expertise in the Windows ecosystem and modern endpoint management, we want to hear from you.

Key Areas of Responsibility

• Modern Endpoint Management and Migration: Help move our end-user devices from hybrid join (Entra ID and on-premises AD) to Entra join, with the aim of removing endpoints' dependency on Active Directory. This includes migrating Group Policy and legacy configuration to Intune policy, and giving input on planning and sequencing.
• Windows Autopilot and Device Provisioning: Build, maintain and improve Autopilot-based provisioning and standard Windows images so that new and reprovisioned devices are secure, consistent and quick to deploy.
• Windows Operating System Management: Maintain our standard Windows configuration, ensuring security, stability and performance. Manage patching, updates and configuration baselines.
• Endpoint Security Management: Help implement and operate endpoint security tooling, including antivirus, anti-malware, endpoint detection and response (EDR) and data loss prevention (DLP), together with device compliance, endpoint privilege management and conditional access policies, working alongside our SecOps team.
• Software Deployment and Management: Package, deploy & patch applications using Microsoft Intune or other software distribution platforms.
• Troubleshooting and Incident Resolution (Level 3): Act as a senior escalation point for complex end-user computing issues across end-user hardware, Windows, Intune and Entra.
• Documentation and Standardisation: Create and maintain documentation for EUC processes, configurations and troubleshooting guides, and drive standardisation across the end-user environment.
• Collaboration and Vendor Management: Work with other IT teams (such as Networking, Security and Identity) and with hardware and software vendors, and contribute to cross-team projects that touch the endpoint. As a senior member of the team, your recommendations on tooling, approach and priorities will be heard and taken into account.

Required Skills & Technical Expertise

• Deep knowledge of Windows client operating systems (Windows 11): installation, configuration, troubleshooting, security settings and performance optimisation.
• Strong hands-on experience with Microsoft Intune and Windows Autopilot.
• Solid working knowledge of Microsoft Entra ID, including Entra join and hybrid join, and of on-premises Active Directory and Group Policy.
• Patch management for Windows and third-party software using Intune or similar tools (for example PDQ).
• Software packaging, distribution and updates using Intune and/or other deployment platforms.
• Understanding of user profile management and modern approaches to consistent user experience across devices.
• Working knowledge of network fundamentals (TCP/IP, DNS, DHCP) as they relate to end-user devices.
• PowerShell scripting for automation, configuration management, deployment and reporting.
• Advanced troubleshooting of complex hardware and OS-level issues and root cause analysis.
• Clear written and verbal communication with both technical and non-technical audiences.

Education and Experience

• Bachelor's degree in Computer Science, Information Technology or a related technical field, or equivalent practical experience.
• 5+ years in End-User Computing roles.
• Hands-on experience with Intune and Autopilot in a production environment.
• Experience with Entra ID and on-premises Active Directory, ideally including hybrid-join environments.
• Demonstrated advanced troubleshooting experience.

Highly Valued / Nice to Have

• Experience contributing to or delivering IT projects, including working with multiple stakeholders across teams and the business.
• Hands-on experience with endpoint privilege management (EPM) solutions.
• Experience with identity and access controls on the endpoint side, such as Entra conditional access and device compliance.
• Familiarity with IT Service Management (ITSM) systems.
• Practical experience managing endpoint security solutions (antivirus and anti-malware, EDR, DLP).
• Experience with an AD-to-Entra migration or a move to cloud-managed endpoints.
• Background in highly regulated sectors such as defense, government or finance.
• Certifications, such as Microsoft Certified: Endpoint Administrator Associate or Microsoft 365 Certified: Modern Desktop Administrator Associate.

What We Offer

We're not about all the hard work and no fun. Our office is relaxed, and we have no dress code. We do our best to look after our people. Below is a snapshot of the perks you'll get if you work with us:

• A diverse, challenging, yet fun work environment with real-life applications.
• Opportunity to use your skills even outside of your role, with the option to grow outside of your role.
• Work with and learn from talented colleagues.
• Full-time employment with a competitive salary.
• 5 weeks vacation per year + 3 sick days.
• Hybrid Working Environment (3 days per week on site in Prague).
• Various benefits, such as meal voucher allowance, office breakfasts, and a fully paid Multisport card/Pluxee card.
• We don't offer just a job. We want to give you the opportunity to grow and move the simulation market forward.