Employer Croydon Health Services NHS Trust Employer type NHS Site Croydon University Hospital Town Thornton Heath Salary £45,953 – £54,254 per annum incl HCAS outer Salary period Yearly Closing 15/07/2026 23:59
Band 6
Croydon is a busy, exciting and diverse place to work. The borough has one of the youngest populations in London and continues to grow.
Croydon Health Services cares for local people at Croydon University Hospital, Purley Memorial Hospital and in clinics and people’s homes all across the borough.
We are a very close-knit and friendly organisation where everyone of our 3600 members of staff is valued. We strongly believe that our employees are our greatest asset and so through Listening into Action – our way of engaging staff – we empower everyone at any level to initiate and bring about real improvements in our care.
Join us and be a part of the team that is making Croydon proud. #choosecroydon
Job overview
An exciting opportunity has arisen to join the Digital Services team at Croydon Health Services NHS Trust as a Digital MCM Engineer (Microsoft Configuration Manager/SCCM).
This newly created role will strengthen the Trust’s endpoint management capability, ensuring the secure, efficient and compliant management of devices, operating systems and applications across the organisation. You will take responsibility for the administration, maintenance and continual improvement of the Trust’s Microsoft Endpoint Configuration Manager (MECM/SCCM) environment, supporting modern device management and digital transformation initiatives.
Working closely with colleagues across End User Services, Infrastructure and Cyber Operations, you will provide specialist technical expertise in device imaging, software deployment, patch management and compliance monitoring. The role is central to supporting cyber security requirements, NHS standards and the ongoing delivery of safe, high-quality patient care.
You will also contribute to key security and compliance programmes, including Cyber Essentials Plus and the Data Security and Protection Toolkit (DSPT), while helping to develop sustainable in-house expertise and reduce reliance on external resources.
The role supports flexible working arrangements and participates in service coverage between 8am and 6pm.
Main duties of the job
As the Digital MCM Engineer, you will provide specialist support for the Trust’s endpoint management environment, ensuring devices remain secure, compliant and operational.
Key responsibilities include:
- Administering and maintaining the Trust’s SCCM/MECM environment.
- Designing, building and maintaining standard operating system images and automated deployment task sequences.
- Packaging, testing and deploying applications, software updates and operating systems using SCCM/MECM and Microsoft Intune.
- Managing endpoint patching processes to ensure timely deployment of security and feature updates.
- Implementing and maintaining configuration baselines, compliance policies and reporting.
- Monitoring system performance, identifying issues and implementing effective solutions.
- Supporting compliance with NHS standards, Cyber Essentials Plus and the Data Security and Protection Toolkit.
- Producing and maintaining technical documentation, procedures and deployment guides.
- Working collaboratively with Digital Services, Infrastructure, Network and Cyber Security teams to support the Trust’s digital strategy.
- Providing technical advice and expertise to stakeholders across the organisation.
Please refer to the Job Description and Person Specification for full details.
Person specification
EDUCATION AND QUALIFICATIONS
- Degree in an IT-related discipline or equivalent demonstrable experience
- Microsoft certifications (e.g. Endpoint Administrator, MECM, Intune)
- Evidence of ongoing Continuous Professional Development (CPD)
- ITIL Foundation certification (or equivalent knowledge)
- Project Management certification (PRINCE2, Agile, SCRUM)
KNOWLEDGE AND UNDERSTANDING
- Advanced knowledge of Microsoft Endpoint Configuration Manager (MECM/SCCM) architecture, deployment, and administration
- Strong understanding of device lifecycle management (build, deploy, patch, retire)
- Advanced knowledge of Windows desktop and server operating systems
- Knowledge of software deployment, patch management, and compliance processes
- Ability to diagnose and resolve complex endpoint deployment and configuration issues
- Knowledge of co-management (SCCM + Intune) and cloud attach strategies
- Understanding of Azure AD, Conditional Access and endpoint security frameworks
- Knowledge of NHS IT systems, clinical applications, and IG requirements
Experience
- Significant experience managing and supporting MECM/SCCM environments in a complex organisation
- Proven experience in OS deployment (OSD), including task sequence design and optimisation
- Experience of software packaging and deployment using SCCM and/or Intune
- Experience deploying security updates and managing patch complianceExperience troubleshooting complex endpoint issues across multi-vendor environments
- Strong PowerShell scripting experience for automation and administration
- Experience using IT Service Management systems (e.g. Fresh Service, ServiceNow)
- Experience working within ITIL frameworks (incident, problem, change management)
- Experience working in an NHS or regulated healthcare environment
- Experience implementing Autopilot and modern device provisioning
- Experience migrating from legacy SCCM to Intune or co-managed environments
- Experience with endpoint security tooling (Defender, BitLocker, compliance policies)
- Experience driving service improvement or automation initiatives
SKILLS/ABILITIES
- Strong analytical and problem-solving skills with attention to detail
- Ability to work independently and manage competing priorities
- Excellent communication skills, able to explain technical concepts to non-technical stakeholders
- Ability to build effective relationships with internal teams and third-party suppliers
- Experience mentoring or supporting junior staff
- Strong customer service focus with a proactive approach to service improvement
- Ability to handle challenging situations and communicate effectively during incidents/outages
- Ability to lead small projects or technical workstreams
Other
- Flexibility to work outside core hours for deployments, maintenance, and incident resolution
- Participation in an on‑call rota where required
- Ability to travel between sites where necessary
- Commitment to maintaining compliance with organisational policies, including Information Governance and Data Protection
#J-18808-Ljbffr…