Soe & Application Packaging Engineer

What success looks like in this role: Senior Systems Engineer (SOE/Packaging) with deep expertise in Windows 11 SOE lifecycle, enterprise application packaging, and endpoint management in hybrid and cloud environments.
The role requires a Subject Matter Expert who can lead design, implementation, governance, and continuous improvement of SOE and application packaging processes, with a strong alignment to Essential Eight controls and security standards.
NV1 security clearance is mandatory.Responsibilities and Accountabilities SOE Solution Design, Implementation and MaintenanceDesign, build and maintain Windows 11 SOEs using MECM/SCCM & Intune (co-management and full cloud).
Lead hybrid and cloud-only Intune deployments, including Autopilot and Group Policy migration into Intune.Run pilot/ringed deployments; analyze telemetry; refine ESP and post-provisioning tasks.Customize SOEs for business personas and VDI/AVD images (Nerdio Preferred – Not Mandatory).
Manage hardware evaluation, integration, and ongoing compatibility.Engineer and administer Windows Update for Business policies and feature/update rings.Airlock administration and management for secure application packaging and SOE processes.Application Packaging and Release ManagementPackage, test, and maintain MSI/MSIX/App-V applications with robust detection, rollback, and version control.Own packaging standards, dependencies, and deployment rings.Operate MECM/Intune for software distribution, compliance, patch orchestration, and hybrid deployments.Knowledge of Papercut administration and management (preferred).
Documentation & Skills TransferProduce As-Built/As-Configured/SOPs/runbooks; provide structured knowledge transfer to L2/L3 teams.Maintain packaging catalog, release notes, change records, and configuration baselines.Application, OS Patching and Hardening (Security Focus)Embed ASD Essential Eight controls into SOE and packaging workflows.Administer and integrate Defender, BitLocker, WDAC/AppLocker, and other baselines.Provide audit evidence, manage exceptions, and report on security posture.Manage certificate renewals and related dependencies within Intune/Hybrid environments.You will be successful in this role if you have:3–5+ years SOE engineering & enterprise packaging (MSI/MSIX/App-V).
Expert in MECM/SCCM, Intune (hybrid and full cloud), Autopilot, AVD/FSLogix.Strong knowledge of Group Policy setup in Intune, hybrid Intune environments, and policy migration.Application Whitelisting knowledge, Airlock administration and secure packaging workflows.PowerShell automation for packaging, validation, and compliance health checks.ServiceNow experience (preferred).
Familiarity with Nerdio AVD management and Papercut administration desirable.Experience in government/regulated environments (ISM/PSPF/E8 alignment).
Clear documentation skills, ITIL-aligned change/release processes, and strong stakeholder communication.Mobile Device & Certificate ManagementManage iPhone/iOS devices in Intune, including enrolment, compliance, and policy deployment.Certificate management on Apple Business Manager/Apple Push Notification service (APNs).
Manage certificate renewals and related dependencies within Intune/Hybrid environments.Certifications (preferred/desirable)MD-102 (Modern Desktop Administrator Associate)AZ-140 (Configuring and Operating Microsoft Azure Virtual Desktop)ITIL v4 FoundationSecurity ClearanceNV1 (mandatory)Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.