EUC OT Engineer

To execute and support the transition and operational activities required for the delivery of Modern Workplace services for Mine OT, ensuring a secure, compliant, and efficient environment

Required Experience

• Managed SCCM, AD, endpoint security
• EUC / Endpoint Engineering
• Endpoint Management – SCCM / MECM
• Active Directory & Identity
• Experience in OT / Industrial / Plant / Mine / Factory environments
• Experience with SentinelOne (strongly preferred) or similar (Defender, CrowdStrike)
• Hands-on endpoint protection deployment
• Operational Support & Transition

Nice to have

• VDI & Specialized Builds
• Audit support experience,Compliance reporting,Remediation handling
• Familiarity with OT security standards
• Site rollout experience /New site / project deployments /Hands-on with device certification & testing

Key Responsibilities

1. Active Directory (AD) & Security

Implement and maintain Role-Based Access Control (RBAC) for both transition and operations.

Design and manage Organizational Unit (OU) structures and Group Policy Objects (GPOs).

Perform maintenance tasks, including scripts for stale objects, LAPS (Local Administrator Password Solution), and BitLocker deployment.

2. MECM (SCCM) & Workstation Management

Participate in the lifecycle management of MECM, including infrastructure setup, SCCM application deployment, and patching schedules.

Manage workstation role groups, builds, local admin rights, application deployment, and configuration items (CIs).

Define and maintain maintenance windows and support both low/high touch deployment models.

Support VDI and non-EUC OT builds as required.

Support hardware certification, migration, PXE build/testing, and image management.

3. Application Lifecycle

Manage application packaging, deployment, and lifecycle processes.

Ensure compliance and reporting for all deployed applications.

4. Endpoint Security (EPS)

Participate in the lifecycle management of SentinelOne infrastructure and management consoles

Assist with deployment and management of SentinelOne and Qualys agents for all servers and workstations.

Work with EPS team and OT stakeholders for antivirus management, policies, exceptions, agent upgrades, and compliance reporting.

Work with EPS and OT stakeholders to implement SentinelOne Protect mode.

5. Process & Documentation

Develop and maintain RACI matrices, HLD/LLD (High-Level/Low-Level Design) documents, runbooks, and process/procedure documentation for EUC OT services.

Support the creation and maintenance of service design packages and catalogues.

6. Compliance & Reporting

Ensure compliance monitoring and reporting across all activities.

Support audit and remediation processes as required.

7. Transition & Operations Support

Stakeholder management and engagement to implement and support services.

Execute transition tasks and ensure smooth handover to operations.

Provide ongoing operational support for all in-scope services and technologies as required for the engagement.

8. Service Management

Manages day-to-day EUC OT service management aspects with the Mine OT project and Mine stakeholders.

Responsible for working with operations teams and stakeholders for escalation, problem management etc.