Deployment Engineer

Deployment Engineer – ELH Device Rollout (OT Environment) Job Description Role Summary · The Deployment Engineer will support the rollout of ELH laptops across Thames Water OT and Field Operations teams. · The role focuses on SCCM-based device build execution, post-build validation, logistics coordination, end-user handover, and embedded hypercare support. · The engineer will work within a resource-based delivery model aligned to ELH governance, readiness criteria, stage gates, and wave-based rollout sequencing. · The role is execution-focused, with ownership for image design, Task Sequence design, application packaging, security controls, and root-cause fixes remaining with Thames Water teams. Key Responsibilities · Execute laptop builds using Thames Water-approved SCCM images and Task Sequences, including build initiation, monitoring, completion checks, and build evidence capture. · Perform post-build validation and functional checks before end-user handover, including application availability, network connectivity, VPN validation, and device readiness checks. · Coordinate device staging, packaging, labelling, distribution, old-device collection, secure return coordination, and chain-of-custody tracking across agreed deployment locations. · Support structured end-user handover, including user login validation, MFA setup, application access validation, handover documentation, and user acknowledgement capture. · Maintain accurate deployment records, asset updates, validation checklists, handover documents, issue logs, escalation trackers, and audit-ready operational evidence. · Provide L0/L1 hypercare support during Trial and Rollout phases, acting as the initial point of contact for deployment-related user issues and queries. · Triage, categorise, track, and escalate build, infrastructure, application, network, VPN, or security-related issues to the appropriate Thames Water teams for L2/L3 resolution. · Create and maintain knowledge base articles for common deployment-related L0/L1 issues to support BAU transition and ongoing support readiness. · Provide regular deployment reporting covering progress, volumes, issues, risks, dependencies, throughput, and forward plan. · Collaborate with ELH governance, OT Compute, OT Network, EUC teams, BAU support teams, logistics teams, and end users to ensure controlled and traceable deployment delivery. Must-to-Have Skills · Hands-on experience in laptop / endpoint deployment, build execution, imaging, validation, and rollout support. · Working knowledge of SCCM / MECM build execution, PXE boot, approved Task Sequences, and Windows OS deployment processes. · Ability to perform functional validation across device readiness, Microsoft 365 access, application availability, VPN setup, network connectivity, and user login validation. · Experience with end-user handover, MFA setup support, issue handling, and first-line deployment hypercare. · Strong experience maintaining deployment records, validation evidence, asset records, chain-of-custody logs, handover artefacts, issue logs, and escalation records. · Experience logging, tracking, triaging, and escalating issues through ITSM processes and tools such as ServiceNow. · Ability to operate in secure, governed, readiness-driven environments with defined RACI, stage-gate approvals, and escalation routes. · Strong coordination skills for logistics, site readiness, device movement, user scheduling, and deployment reporting. Good-to-Have Skills · Experience working in OT, utilities, infrastructure, regulated, or security-sensitive environments. · Exposure to large-scale, wave-based rollout programmes involving trial, rollout, hypercare, and BAU handover phases. · Working knowledge of Active Directory object coordination, Microsoft licence assignment requests, security group validation, and endpoint tracking processes. · Familiarity with VPN clients such as Ivanti VPN, endpoint security tools such as Symantec EPP, and device tracking systems such as Absolute. · Experience creating knowledge base articles and supporting BAU handover, issue closure, asset reconciliation, and final reporting activities. · Understanding of audit-ready documentation, chain-of-custody controls, operational reporting, and deployment governance. Qualifications · Diploma or bachelor’s degree in Information Technology, Computer Science, Engineering, or a related technical discipline, or equivalent hands-on experience. · Relevant experience in desktop engineering, field services, endpoint deployment, IT operations, or device rollout support. · Experience supporting enterprise IT deployment programmes and working with technical teams, service teams, and end users in controlled environments. · Experience in deployment validation, end-user support, incident tracking, documentation, and operational reporting. Certifications · Microsoft Endpoint Configuration Manager, Microsoft Intune, Windows deployment, or equivalent endpoint management certification preferred. · ITIL Foundation or equivalent IT service management certification preferred. · Security clearance eligibility may be required. The engagement requires at least one SC-cleared resource for secure access activities. · Additional Microsoft 365, Windows client, networking, or endpoint support certifications would be advantageous. Soft Skills · Clear communication with end users, technical teams, governance stakeholders, and BAU support teams. · Attention to detail and strong ownership of documentation, evidence quality, asset accuracy, and audit readiness. · Structured problem-solving and disciplined issue triage with appropriate escalation judgement. · Adaptability in a flexible, readiness-based rollout model where sequencing, throughput, and deployment timelines may change. · Customer-focused approach during user handover and hypercare support. · Collaborative working style across OT Compute, OT Network, EUC, ELH governance, logistics contacts, and field users.