Wintel Senior Engineer

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Wintel Senior Engineer

Overview

As a Senior Wintel Platform System Engineer (SCCM & Ansible-focused), you will be responsible for the design, build, automation, and ongoing optimisation of Vocalink’s Windows platform estate.

The role focuses on end-to-end automation and lifecycle management of Windows environments, leveraging SCCM (Microsoft Endpoint Configuration Manager), Ansible, and Infrastructure as Code (IaC) to deliver scalable, consistent, and secure infrastructure services.

You will play a key role in transitioning from traditional Wintel operations to a modern, automation-led platform engineering model, ensuring all services meet SLAs, security standards, and availability targets.

Responsibilities

• Design, implement, and maintain SCCM solutions for OS deployment, patching, software distribution, and compliance

• Develop and manage Ansible automation frameworks for Windows configuration, orchestration, and integration with SCCM

• Build and maintain automated Windows server build pipelines (gold images, baseline configurations)

• Deliver Infrastructure as Code (IaC) solutions for provisioning and configuration management

• Automate patching, remediation, and compliance enforcement across the Wintel estate

• Integrate SCCM and Ansible with CI/CD pipelines and Git-based workflows

• Develop self-service capabilities and automation for application and infrastructure delivery

• Troubleshoot and resolve complex Windows platform issues, implementing automation-driven prevention

• Lead platform modernisation initiatives, reducing manual effort and operational overhead

• Support capacity planning, performance optimisation, and cost management

• Collaborate with infrastructure, security, and application teams to deliver reusable and scalable platform services

• Work closely with 3rd party vendors and internal stakeholders to implement industry best practices

All About You

• Strong experience delivering Wintel platform engineering and SCCM-based solutions at scale

• Proven ability implementing and optimising SCCM (Endpoint Configuration Manager) environments

• Hands-on experience with Ansible for Windows automation (WinRM, PowerShell modules, orchestration)

• Experience building automated OS deployment and patching frameworks

• Experience transforming traditional Windows administration into automation-led operations

• Experience leading workstreams and acting as a technical authority in Wintel engineering

• Ability to define and implement automation standards, frameworks, and best practices

• Strong problem-solving skills with experience resolving complex enterprise platform issues

• Experience driving efficiency, compliance, and cost optimisation through automation

Technical and Professional Skills

Core Wintel Platform Skills

• Windows Server (2016/2019/2022) – Advanced

• Active Directory, Group Policy (GPO) – Advanced

• DNS, DHCP, PKI, Certificate Services – Advanced

• PowerShell scripting & automation – Advanced

SCCM / Endpoint Management (Primary Focus)

• SCCM (Endpoint Configuration Manager) – Expert

• OS Deployment (OSD)

• Patch management & WSUS integration

• Software distribution

• Compliance baselines

• Intune / Co-management (awareness or experience) – Intermediate

Automation & DevOps

• Ansible (Windows modules, playbooks, roles) – Advanced

• Infrastructure as Code (Terraform, Ansible) – Advanced

• Git / version control (GitOps) – Advanced

Platform Engineering & Tooling

• Golden image management & build automation – Advanced

• Monitoring & logging (Splunk or equivalent) – Intermediate

• Vulnerability & compliance tools (Qualys, CIS benchmarks) – Intermediate

• Patch orchestration & automation frameworks – Advanced

Infrastructure & Architecture Awareness

• Virtualisation (VMware, Hyper-V) – Advanced

• Storage & backup technologies – Intermediate

• Networking (TCP/IP, DNS, Load balancing) – Advanced

• Cloud platforms (Azure AWS awareness) – Intermediate

Operating Model & Practices

• ITIL Service Management – Strong working knowledge

• Agile delivery (Scrum/Kanban) – Intermediate

• Atlassian tools (Jira, Confluence) – Intermediate

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.