Senior Platform Engineer - Standard Operating Environment

See Yourself in the Team

The SOE Engineering team maintains the Standard Operating Environment (SOE) using SCCM, Group Policy, and Intune. As an escalation path for Service Desk and Desktop Technician, SOE Engineering develops tools based on user feedback and evolving technology to support business colleagues. SOE Engineering aims to provide a stable and efficient desktop platform through reliable and cost-effective tools, processes, and enterprise systems.

Your Role and Responsibilities

As a Senior Platform Engineer - Standard Operating Environment (SOE), you will play a crucial role in managing and optimising our Windows environments. You will be joining a crew who are responsible for securing over 60,000 physical and virtual Windows endpoints, and are committed to providing superior workplace technology experiences for all teams within CommBank. In this role, your duties may include, though not limited to:

• Providing 3rd level support for Intune, Microsoft Configuration Manager (SCCM), and Windows 10/11 end-user environments for over 40,000 devices.

• Designing, reviewing, and building Windows 11 Intune configurations.

• Creating Intune Configuration Profiles and Compliance Policies for Windows 11 devices.

• Packaging and deploying applications via Intune for Windows 11 devices.

• Updating and managing Windows 11 SOE builds, including deployment via SCCM and Autopilot.

• Configuring and testing Windows 11 Autopilot device provisioning.

• Reviewing and migrating Windows 10/11 Group Policies to Intune.

• Administering the Intune Admin Centre and SCCM, including patching and endpoint security.

• Implementing Essential Eight Security hardening following Microsoft's and CIS (Centre for Internet Security) recommendations.

• Configuring and managing Microsoft Defender for Endpoint.

• Developing PowerShell scripts to automate various tasks related to Windows, Active Directory, Entra ID, and Intune.

• Creating Azure Runbooks to automate Entra ID and AVD tasks

Your Skills and Experience

We are looking for candidates with the following skills and qualifications:

• Extensive experience with Intune, SCCM, and Group Policy management.

• Strong knowledge of PowerShell scripting and automation.

• Proficiency in configuring and managing Windows 10/11 environments.

• Experience with CIS (Centre for Internet Security) configuration and compliance.

• Familiarity with Azure Virtual Desktop (AVD) and Nerdio management.

• Strong understanding of ITIL, Agile, and Scrum methodologies.

• Experience working with Infrastructure as Code using tools

• Knowledge of CI/CD pipeline, DevSecOps Principles, AI Powered Engineering and Automation tools 

• Excellent problem-solving and troubleshooting skills.

• Strong communication and mentorship abilities.

What's in it for you?

We’re a truly friendly and collaborative environment, where innovation is fostered, and individual contributions are celebrated. Aside from the wonderful impact this role brings to the lives of many, you can also look forward to:

• Competitive rem, bonus, employee discounts and benefits.

• Hybrid work model with 50% monthly in-office.

• Be part of a team that values innovation, collaboration, and professional growth.

• Access to world-class technologies, tools and platforms.

• Limitless learning and development opportunities.