Wintel Engineer (Secure) - Hampshire

Job Description:
ITO Wintel Engineer – Job Description

Role Summary:

The Wintel Engineer provides Level 3 support for Windows Server, VMware vSphere and Microsoft Hyper-V across DXC-managed customer environments, maintaining performance, availability and security through OS patching, hardening, capacity monitoring, VM lifecycle management and incident resolution within agreed SLAs. Required experience spans design, implementation and day-to-day support of:

- Windows Server OS versions 2016–2025

- WSUS and SCCM configuration

- RDS configuration for remote access from end points
Working within ITIL-aligned processes, the engineer implements approved changes, maintains accurate CMDB records and runbooks, validates backup and failover readiness, and supports vulnerability remediation. Complex or architectural issues are escalated to senior engineers with clear diagnostics and recommended next steps.

Due to the nature of the work and the customers we support, the successful candidate must be eligible to meet UK Government and contractual personnel security requirements, including the applicable residency requirements for the role, and have the right to work in the United Kingdom. Some roles may also be subject to nationality requirements where these are necessary to meet UK Government or contractual security obligations.

Please note the role will require 5 days on-site in Hampshire.

Key Responsibilities:

- Monitor server and virtualisation CPU, memory, storage and network utilisation; report trends and threshold breaches to the team lead for capacity planning.

- Maintain CMDB records for Windows Server and virtualisation assets, including relationships, dependencies and lifecycle status.

- Contribute to patching schedules and maintenance planning; coordinate change sequencing to minimise service disruption.

- Raise recurring Windows Server and virtualisation incidents through Problem Management, supplying diagnostics for root-cause investigation.

- Implement fixes and workarounds from problem records under senior engineer guidance to prevent recurrence.

- Update runbooks, standard operating procedures and knowledge articles to reflect current configurations, known errors and lessons learned.

- Contribute observations and improvement suggestions to post-incident reviews and continual service improvement.

- Provide customer stakeholders with clear, timely updates on planned changes, maintenance windows and service impacts.

- Coordinate cross-domain dependencies with Network, Storage, Security and Application teams, particularly for patching, VM migrations and infrastructure changes.

- Update incident managers and relevant stakeholders on technical progress, impact and expected resolution times.

- Support approved Windows Server and virtualisation changes, including OS deployments, VM provisioning, template updates and configuration changes.

- Validate builds against hardened security baselines and organisational standards before production deployment.

- Validate guest workload backup and failover readiness; confirm successful backup jobs and documented, tested failover procedures.

- Maintain current, accessible architecture diagrams and technical documentation for server and virtualisation environments.

- Build and configure physical and virtual Windows Servers to hardened baselines compliant with CIS benchmarks or equivalent organisational standards.

- Deploy, patch and maintain Windows Server operating systems through approved change processes, coordinating with Change Management within agreed maintenance windows.

- Provision, clone, snapshot, resize, migrate and decommission VMs across VMware vSphere and/or Hyper-V.

- Apply OS hardening and local security policies; use templates and automation where available for consistent, repeatable builds.

- Resolve L3 Windows Server and virtualisation incidents(RDS, SCCM, WSUS), including OS failures, performance degradation, service crashes, VM availability and storage connectivity issues.

- Diagnose faults using native Windows tools, VMware/Hyper-V consoles and event logs; escalate issues requiring architectural investigation or vendor engagement to senior engineers.

- Fulfil Windows Server and virtualisation service requests—including provisioning, configuration changes, access and decommissioning—within agreed SLAs and approved processes.

- Monitor server performance and availability; review alerts, investigate threshold breaches and act proactively to prevent service degradation.

- Perform routine guest workload backup and failover validation; confirm recoverability and report failures for remediation.

- Remediate vulnerabilities under guidance, applying patches, configuration changes and hardening directed by Security or Vulnerability Management teams.

- Maintain accurate, readily available audit and compliance evidence for internal and external reviews.

- Include clear diagnostics, impact assessments and recommended next steps in all escalations to senior staff.

Required Skills & Experience:
Essential:
Windows Server Operations, WSUS, SCCM and RDS: 2–5 years’ hands-on enterprise or managed-service experience supporting Windows Server 2016, 2019, 2022 and 2025, SCCM, WSUS, and RDS farms and access; solid installation, configuration, patching, troubleshooting and security-hardening skills across physical and virtual platforms.
Virtualisation. Strong VMware vSphere and/or Hyper-V skills in VM provisioning, cloning, snapshots, migration, resource management and troubleshooting; understanding of host, guest OS, storage and network performance dependencies.
OS Administration & Patching. Competent in Windows Server service, disk, file system and driver administration, Windows Update/WSUS patching and event log analysis, including patch-cycle management and post-patch health validation.
Troubleshooting. Structured, evidence-based diagnosis and resolution of Windows Server and virtualisation faults, including OS failures, blue screens, service crashes, performance bottlenecks, storage connectivity and VM availability issues.
Networking Fundamentals. Good understanding of TCP/IP, DNS, DHCP, NIC teaming, VLANs and firewall rules in server and virtualisation environments; ability to diagnose basic connectivity faults affecting server availability.
Storage Connectivity. Familiarity with SAN, NAS, iSCSI, datastore management and storage presentation to virtual hosts and guests; foundational troubleshooting of storage connectivity and performance issues.
Security Baselines. Understanding of Windows Server hardening, CIS benchmarks or equivalent, local security and audit policies, and vulnerability remediation; ability to apply hardening configurations and support security compliance.
ITIL Practices. Good understanding of ITIL Incident, Problem, Change and Configuration Management; ability to execute approved changes and maintain CMDB accuracy in an ITIL-aligned environment.
Monitoring. Experience monitoring server and VM performance, availability and health; ability to interpret alerts, investigate threshold breaches and prevent service degradation proactively.
Documentation. Maintain high-quality, accurate and current runbooks, SOPs, architecture diagrams and audit artefacts accessible to the wider team.
Backup & Recovery. Practical experience validating guest workload backups and failover readiness; understanding of backup schedules, retention policies and basic restore procedures.
Attention to Detail. Maintain system stability through careful changes, thorough validation and accurate records in a controlled environment.
Security Clearance. DV clearance required.
Desired:
Certifications. Microsoft Certified: Windows Server Hybrid Administrator Associate, VMware Certified Professional (VCP), or equivalent vendor certifications that validate Windows Server and virtualisation competency.
ITIL 4 Foundation. ITIL 4 Foundation certification or higher is desirable, demonstrating a formal understanding of ITIL practices and the service value chain.
Scripting. Exposure to PowerShell for automating routine server administration tasks, health checks, and reporting. The ability to write and maintain basic scripts is a strong advantage.
Capacity Planning. Exposure to infrastructure capacity planning — monitoring resource utilisation trends and contributing data to support forecasting and growth planning for the server and virtualisation estate.
Backup Solutions. Familiarity with enterprise backup solutions such as Veeam, Commvault, or similar, and an understanding of backup architecture, job configuration, and restore testing.
Clustering & High Availability. Awareness of Windows Server Failover Clustering (WSFC) and VMware High Availability (HA) / Distributed Resource Scheduler (DRS) concepts and their role in maintaining service availability.
Cloud Awareness. Exposure to hybrid or cloud environments — Azure IaaS, AWS EC2, or similar — and an understanding of how on-premises virtualisation relates to cloud infrastructure services.
Monitoring Tools. Familiarity with enterprise monitoring platforms such as SCOM, SolarWinds, Nagios, or similar, and the ability to interpret dashboards and alerts for proactive infrastructure management.
Compliance Awareness. Awareness of regulatory frameworks such as ISO 27001, Cyber Essentials, and NIST, and their impact on server security configuration and audit requirements.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available  here .