SOE & Application Packaging Engineer at Unisys: Shape the Future of Digital Workspaces

## Role Overview Unisys is seeking a highly skilled and experienced SOE & Application Packaging Engineer to join our dynamic team in Canberra or Sydney. In this critical role, you will be responsible for the design, implementation, and maintenance of our Windows 11 Standard Operating Environment (SOE) and the packaging of enterprise applications for deployment across our organization. You will be a Subject Matter Expert (SME) in Windows 11 SOE lifecycle, enterprise application packaging, and endpoint management in hybrid and cloud environments. This role demands a strong focus on security, aligning with Essential Eight controls and industry best practices. A mandatory NV1 security clearance is required. ## A Day in the Life As an SOE & Application Packaging Engineer at Unisys, your day will be diverse and challenging, encompassing the following activities: * **SOE Solution Design and Implementation:** Designing, building, and maintaining Windows 11 SOEs using MECM/SCCM & Intune, including co-management and full cloud deployments. You'll lead hybrid and cloud-only Intune deployments, encompassing Autopilot and Group Policy migration into Intune. * **Pilot and Ringed Deployments:** Running pilot/ringed deployments, analyzing telemetry data, and refining ESP and post-provisioning tasks to ensure smooth and efficient rollouts. * **SOE Customization:** Customizing SOEs for various business personas and VDI/AVD images, leveraging tools like Nerdio (preferred but not mandatory) to optimize the user experience. * **Hardware Management:** Managing hardware evaluation, integration, and ongoing compatibility to ensure seamless SOE performance across different devices. * **Windows Update Management:** Engineering and administering Windows Update for Business policies and feature/update rings, ensuring timely and secure updates. * **Application Packaging and Release Management:** Packaging, testing, and maintaining MSI/MSIX/App-V applications with robust detection, rollback, and version control mechanisms. You'll own packaging standards, dependencies, and deployment rings. * **Software Distribution:** Operating MECM/Intune for software distribution, compliance monitoring, patch orchestration, and hybrid deployments, ensuring consistent software delivery across the environment. * **Documentation and Knowledge Transfer:** Producing comprehensive documentation, including As-Built/As-Configured documents, SOPs, and runbooks. You'll also provide structured knowledge transfer to L2/L3 support teams. * **Security Focus:** Embedding ASD Essential Eight controls into SOE and packaging workflows. Administering and integrating security tools like Defender, BitLocker, and WDAC/AppLocker. Providing audit evidence, managing exceptions, and reporting on security posture. * **Mobile Device Management:** Managing iPhone/iOS devices in Intune, including enrolment, compliance, and policy deployment. You'll also handle certificate management on Apple Business Manager/Apple Push Notification service (APNs). ## Why Canberra & Sydney? Canberra and Sydney are both vibrant cities offering unique advantages for technology professionals. Canberra, as the capital city of Australia, boasts a strong government presence and a thriving technology sector focused on innovation and security. Sydney, a global hub for finance and technology, offers a diverse range of opportunities and a dynamic lifestyle. Choosing between these locations depends on your personal preferences and career aspirations. ## Career Path This role provides a solid foundation for career advancement within Unisys. You can progress into roles such as: * **Senior SOE Architect:** Leading the overall SOE strategy and design for the organization. * **Endpoint Management Lead:** Managing the entire endpoint environment, including devices, applications, and security policies. * **Security Architect:** Focusing on the security aspects of the SOE and application packaging processes. * **IT Manager:** Overseeing a team of engineers and responsible for the overall IT infrastructure. ## Salary & Benefits The estimated salary range for this role is $110,000 - $160,000 AUD per year, depending on experience and qualifications. Unisys offers a comprehensive benefits package, including health insurance, paid time off, retirement savings plan, and employee assistance programs. ## Unisys Culture Unisys is a global technology company that delivers success for our clients. We design, build and run the best solutions to advance our clients’ missions. We offer unique, outcome-focused solutions that are seamlessly integrated and delivered to drive exceptional results. We thrive on innovation, collaboration, and a commitment to excellence. Our culture fosters a supportive and inclusive work environment where employees are empowered to reach their full potential. ## How to Apply Interested candidates are encouraged to apply online through the Unisys careers website. Please submit your resume and a cover letter highlighting your relevant experience and qualifications. ## Frequently Asked Questions (FAQ) **Q1: What is an SOE?** * An SOE (Standard Operating Environment) is a standardized configuration for desktop and laptop computers within an organization. It includes the operating system, applications, and security settings. **Q2: What is application packaging?** * Application packaging is the process of preparing software applications for deployment to end-users. It involves creating installation packages, configuring settings, and testing for compatibility. **Q3: What is MECM/SCCM?** * MECM (Microsoft Endpoint Configuration Manager), formerly known as SCCM (System Center Configuration Manager), is a Microsoft product used for managing and deploying software, operating systems, and security updates to devices on a network. **Q4: What is Intune?** * Intune is a cloud-based mobile device management (MDM) and mobile application management (MAM) service that allows organizations to control how their employees' devices are used, including mobile phones, tablets, and laptops. **Q5: What is Autopilot?** * Autopilot is a suite of technologies used to preconfigure new devices with the organization's settings and applications, streamlining the onboarding process for new employees. **Q6: What is AVD/FSLogix?** * AVD (Azure Virtual Desktop) is a Microsoft service that allows users to access their desktops and applications remotely from any device. FSLogix is a set of technologies that enhances the performance and management of virtual desktops. **Q7: What is Group Policy?** * Group Policy is a feature of Windows that allows administrators to centrally manage the settings of computers and users in an Active Directory domain. **Q8: What is Essential Eight?** * The Essential Eight is a set of mitigation strategies developed by the Australian Cyber Security Centre (ACSC) to protect organizations from cyber threats. **Q9: What is Airlock?** * Airlock, in the context of secure application packaging, typically refers to a secure and controlled environment used to build and test application packages, ensuring that they are free from malware and vulnerabilities. **Q10: What is PowerShell?** * PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and scripting language.