Business Unit: Cubic Transportation Systems Company Details: Responsible for the operational delivery of Ivanti Endpoint Management Suite (software deployment tool) to apply security improvements and ensure compliance across the front office estate. Participates in technical project delivery in addition to providing operational 2nd/3rd line support of services. Responsible for root-cause analysis, the delivery of effective resolutions and stakeholder management. Job Details: Essential Job Duties and Responsibilities: Responsible for the availability of the Ivanti Endpoint Management Suite and associated services provided through this technology (Patch Management, OS Provisioning, Software Delivery). Responsible for the development, implementation and communication of associated Plan, Build, Check and Run activities associated with Ivanti such as the corporate build, patch content creation, packaging deployments, patch deployments, custom content creation for vulnerabilities, queries and reporting and maintenance of an Ivanti environment including migrations and upgrades and security (roles-based access control). Responsible for investigation and remediation of any security vulnerabilities in the Front Office estate within agreed timelines and ensuring minimal impact to the customer experience. Through standards, ensure security hardening across all Front Office platforms through configuration and regular patch management of both the operating system, Consumer-of-the-shelf (COTS) applications and Cubic software. Through continuous improvement, assist in maturing packaging and delivery strategy to include areas such as application delivery, antivirus, security patching, drivers /updates, and endpoint build (PCs/ laptop/VM), and Operating System deployment. Manage and maintain system and process documentation libraries Take ownership and accountability of the full life cycle of patch deployments (‘Test’ > ‘Vanguard’ > Production) Maintain awareness of technical developments within the industry and contribute to road-maps for the Infrastructure Services. Maintenance of an Ivanti environment including upgrades and security RBAC (roles-based access control) management. Participate in projects to deliver customized software distribution to bespoke hardware and devices and provide hand-off processes and procedures. Escalation of issues to line management as required and contribute to their resolution. Work from other Cubic or customer sites as and when required. Support with any training requirements resulting from technical changes within Service organisation. Comply with Cubic’s values and adherence to all company policy and procedures. Comply with the code of conduct, quality, security and occupational health, safety and environmental policies and procedures. In addition to the duties and responsibilities listed, the job holder is required to perform other duties assigned by their manager from time-to-time, as may be reasonably required of them. Education and qualifications: Essential: University Degree in a relevant subject (i.e. Engineering, Computer Science) or equivalent education/experience Relevant Microsoft Accreditation Ivanti product portfolio certification or equivalent experience Desirable: ITIL certification Microsoft certifications Skills/Knowledge/Experience: Essential: Security and Application Patching Tool Experience: Preferably - Ivanti End point Manager (Version 11 upwards), Microsoft SCCM, ManageEngine Patch Manager Plus, NinjaOne. Will consider others tools. Demonstrable experience of PowerShell Scripting (New & Existing Scripts) Deployment knowledge of Microsoft Operating Systems (Desktops & Servers). Demonstrable experience working within a multi-platform IT infrastructure environment. Proven ability to manage a patch testing environment within a ‘Model Office’ and maintain all front office devices. Experience in setting up and supporting a Microsoft Windows desktop environment Experience in setting up and supporting a Unix desktop environment (e.g. Ubuntu). Experience working within ITIL framework (including change and release management) Experience of working to ISO 9001/ 20000 or equivalent quality standard Solid understanding of network fundamentals using TCP/IP Experience in Microsoft Active Directory Infrastructure (including DNS / DHCP / DFS / WSUS) and setting group policies. Experience in OS Image deployment methodologies (PXE, Ghost Imaging, Snapshots, Backups) Desirable: Service Delivery Management experience delivering to tight SLA’s Virtual Technology Experience, including administration and configuration (Hyper-V, VMWare (vSphere)) Experience of Bash Scripting, vb.net, c++, .net and/or windows batch scripting Personal Qualities: Positive, self-motivated and proactive Responsible with the ability to work both autonomously when required and productively within a cross-functional team environment Ability to consistently work to deadlines Team player Diligent, with attention to detail. Flexible approach to problem solving and find effective and timely resolutions Organised with the ability to handle multiple projects and undertake new tasks quickly Excellent communication skills both verbal and written, strong documentation skills Strong interpersonal skills with a willingness to share knowledge, coach and collaborate effectively An enthusiasm for new technologies and their application for both business and consumers Worker Type: Employee