Security Engineer

Job Summary

We are seeking an experienced GlobalProtect End User Computing Engineer to join the Shared Technology Services End User Computing team. The successful candidate will be responsible for the administration, support, configuration, troubleshooting, and ongoing improvement of Palo Alto GlobalProtect remote access solutions, ensuring secure and reliable connectivity for users across multiple organisations.

The role will also support wider EUC services including Microsoft Intune, Windows 11, endpoint security, application deployment, device management, and user computing technologies. The engineer will work closely with Network, Security, Infrastructure, and Service Desk teams to deliver secure remote access services while maintaining excellent user experience and compliance with cybersecurity standards.

Key Skills & Requirements

Administer and support Palo Alto GlobalProtect remote access infrastructure.

Configure and troubleshoot GlobalProtect client deployments, authentication methods, certificates, and connectivity issues.

Manage VPN profiles, policies, client settings, and endpoint compliance integration.

Investigate and resolve VPN connectivity, performance, and authentication incidents.

Work with Network and Security teams to implement secure remote access solutions.

Support migration projects involving VPN, ZTNA, Prisma Access, and remote connectivity services.

Package, deploy, and maintain endpoint software using Microsoft Intune.

Support Windows 10 and Windows 11 devices, including laptops, desktops, kiosks, and remote devices.

Configure and manage Microsoft Intune policies, compliance policies, configuration profiles, and application deployments.

Maintain documentation, operational procedures, knowledge articles, and technical designs.

Participate in project delivery, service improvement initiatives, and technology refresh programmes.

Provide 3rd line technical support and act as an escalation point for complex EUC issues.

Support change management processes, CAB submissions, testing, and implementation activities.

Strong experience with Windows 10 and 11 application deployment, configuration, troubleshooting and support

Essential Skills & Experience

Strong experience supporting Palo Alto GlobalProtect VPN solutions.

Experience with Prisma Access and Zero Trust Network Access concepts.

Knowledge of VPN technologies, remote access, SAML, LDAP, MFA, and certificate-based authentication.

Experience administering Microsoft Intune and Endpoint Manager.

Strong Windows 10 and Windows 11 support and troubleshooting skills.

Experience with Microsoft Entra ID (Azure AD), Conditional Access, and endpoint compliance.

Experience with Intune application deployment and software packaging.

Strong understanding of networking fundamentals including DNS, TCP/IP, routing, and firewalls.

Experience supporting remote desktop technologies including AVD, Windows 365, RDS, and RemoteApp.

PowerShell scripting and automation skills.

Experience producing technical documentation and implementation plans.

Excellent troubleshooting, analytical, and problem-solving skills.

Desirable Skills

Palo Alto Networks certification (PCNSA, PCNSE or equivalent).

Experience with Prisma Access.

Experience supporting F5, DirectAccess, Always-On VPN, or Zscaler.

Experience working within Local Government or Public Sector environments.

Understanding of Cyber Essentials Plus, ISO27001, and security best practices.

Personal Attributes

Strong customer service focus.

Excellent communication and stakeholder management skills.

Ability to work independently and as part of a wider technical team.

Able to manage multiple priorities within a fast-paced environment.

Committed to continuous improvement and knowledge sharing.

Working Arrangements

Hybrid working model.

May require attendance at multiple customer locations.

Participation in planned out-of-hours changes and project implementations when required.