Modern Workplace Deployment Engineer (Intune & Entra ID) - 6 month FTC

Employment: Contract At OQC, we aren’t just theorising about the future; we’re building it. Born from a philosophy of bold innovation, we’ve successfully transitioned quantum computing from an academic dream into a commercial reality. The most exciting thing is that we’re just getting started and we’ve recently closed our £260 million Series C funding round which is the largest fundraise ever completed by a quantum computing company in Europe. The Purpose Deliver the rollout of a modern, cloud-managed workplace across OQC’s identity and endpoint platforms. As our Modern Workplace Deployment Engineer, you’ll work to designs agreed with our delivery partners and standards set by our permanent Endpoint and Identity and Access Engineers. You’ll combine hands-on administration with migration, rollout and handover, leaving platforms secure, documented and ready for ongoing support. The Role Reporting to the IT Director, you’ll act as the hands-on administrator for Microsoft Intune and Entra ID during the transition period. As the permanent Endpoint and Identity and Access Engineers join, you’ll transfer platform responsibilities to each of them and focus on delivering migrations, phased rollouts and operational handover. You’ll own rollout delivery, device migration, pilots, user readiness and partner coordination - not permanent ownership of platform architecture, identity security policy or endpoint engineering standards. You’ll work within agreed access controls and change-approval processes, with Conditional Access and privileged-access policy changes approved by the Identity and Access Engineer, or the IT Director until that engineer is in post. This is a full-time, hybrid fixed-term 6-month contract, based at OQC’s UK head office with regular on-site attendance. Travel to other UK and international OQC sites may be required to support project delivery. What You’ll Be Working On Implement approved Intune and Entra ID configurations, including compliance policies, configuration profiles and security baselines. Validate endpoint controls so enrolled devices are encrypted, recovery keys are held centrally, standing local administrator rights are removed and required security agents have tamper protection. Deliver agreed identity changes, including the oqc.tech primary domain and federation with Google Workspace, and onboard applications to Single Sign-On and SCIM provisioning with appropriate planning, testing and rollback arrangements. Implement Windows Autopilot and Apple Business Manager enrolment, including Platform SSO for macOS, and migrate existing Windows, macOS and Linux devices into management, arranging device replacements where required. Contribute to implementing and testing HR-driven joiner, mover, leaver and suspension automation, working with HR and other stakeholders under the technical leadership of the Identity and Access Engineer. Package and deploy core applications, resolve the application-deployment backlog and implement update and patching rings for Windows and macOS. Plan and deliver pilots and phased rollouts, including test plans, user communications, floor-walking support and readiness checks. Coordinate delivery with external partners, track progress, risks and issues, and report to the IT Director. Produce configuration baselines, technical design records and operational runbooks, transfer knowledge to the permanent engineers and complete a documented operational handover approved by the IT Director before the assignment ends. What We’re Looking For Recent hands-on experience delivering Microsoft Intune and Entra ID deployments or migrations from end to end. Experience with Windows Autopilot, Conditional Access, compliance policies, security baselines and BitLocker. Experience deploying macOS through Intune and Apple Business Manager, including FileVault and Platform SSO. Experience integrating Entra ID with Google Workspace or another identity provider, including Single Sign-On using SAML and OIDC, and SCIM provisioning. Automation skills using PowerShell and Microsoft Graph. Experience designing and running test plans, pilots and phased rollouts. The ability to produce high-quality technical documentation and complete effective operational handovers. A delivery-focused, organised approach, with a track record of seeing work through and collaborating effectively with partners and stakeholders. A commitment to documenting work as you go and transferring knowledge so colleagues can operate and support the platforms independently. The ‘Nice-to-Haves’ Experience with Privileged Identity Management and Entra ID governance features. Experience deploying endpoint detection and response and security service edge agents, such as CrowdStrike and Netskope. Experience building HR-driven provisioning with a modern HR system. Experience with domain or tenant changes and migrations. Experience working alongside or within a Microsoft partner, or in a consultancy role. Experience delivering projects in a fast-growing, research-led or regulated organisation. Microsoft MD-102, SC-300 or equivalent certifications. Why Join OQC You will join a world-class team at the forefront of the next computational era. We offer a culture of bold innovation, the chance to work with unique lab infrastructure, and the opportunity to see your work redefine the limits of computation. You’ll take a hands-on role in OQC’s transition to a modern, cloud-managed workplace, bringing together identity, device management and user readiness. From the first pilot through to formal handover, your contribution will help ensure the rollout leaves secure, well-documented platforms that the permanent team can confidently support.