- Location: Reading, UK (100% Onsite)
- Engagement: 6-Month Contract (Inside IR35)
- Security Clearance: Valid, fully transferable Developed Vetting (DV) clearance is mandatory
Role Overview
We are seeking an experienced Application Packager to join our Software Discovery and Packaging Team supporting a secure, mission-critical defence programme in Reading.
Operating fully onsite within an air-gapped/controlled environment, you will manage the end-to-end application lifecycle-from initial requirements discovery and packaging through to deployment, patching, and retirement. The estate encompasses Windows 10/11 endpoints managed via Microsoft Endpoint Configuration Manager (MECM), requiring a specialist who is equally adept at modern packaging methodologies and legacy software remediation.
Key Responsibilities
- End-to-End Packaging Lifecycle: Lead software intake and discovery, evaluating licensing, identifying dependencies, rationalising redundant versions, and delivering clean, production-ready packages.
- Packaging & Authoring: Develop, test, and maintain MSI packages, MST transforms, and custom scripted installers using tools such as Flexera AdminStudio, InstallShield, and ORCA.
- Complex Application Delivery: Package bespoke, legacy, and high-complexity software suites (e.g., Autodesk, Microsoft 365/Office, specialised engineering, and scientific tooling).
- MECM Deployment & Management: Configure and deploy packages using the MECM Application Model, setting up robust detection rules, system requirements, dependencies, supersedence, and rollback routines.
- Testing & Quality Assurance: Conduct clean-build testing, orchestrate User Acceptance Testing (UAT) with business application owners, and maintain detailed technical sign-off documentation.
- Secure Environment Operations: Manage software media imports, vulnerability scanning, and cryptographic provenance checks in compliance with strict air-gapped security protocols.
- OS & Migration Support: Support Windows 10/11 migration tracks, large-scale software rollouts, and endpoint gold-image build engineering.
- Tier-3 Troubleshooting: Investigate and resolve complex deployment failures using installer logs, Process Monitor, and diagnostic utilities.
- Governance & Process: Adhere strictly to ITIL-aligned Change, Configuration, and Release Management frameworks, providing regular deployment reporting and audit-ready records.
Essential Criteria & Skills
- Security Clearance: Active, fully transferable UK Developed Vetting (DV) clearance.
- Enterprise Packaging Expertise: Proven track record packaging for enterprise Windows 10/11 environments, with deep knowledge of MSI table architecture, transforms, custom actions, and repair mechanisms.
- Tooling: Proficient with Flexera AdminStudio, InstallShield, and ORCA (or industry equivalents).
- Scripting & Automation: Strong PowerShell scripting skills, particularly with the PowerShell App Deployment Toolkit (PSADT).
- MECM/SCCM: Hands-on experience with MECM Current Branch (Application Model, distribution points, collections, and deployment monitoring) alongside Active Directory and Group Policy.
- Troubleshooting: Advanced diagnostic capability using Sysinternals (Process Monitor, Process Explorer) and MSI verbose logging.
- Stakeholder Management: Confident communicator able to collaborate with technical peers, service delivery managers, and non-technical business stakeholders.
Desirable Experience
- Prior experience in UK Defence, Central Government, or high-security air-gapped environments.
- Modern deployment formats: MSIX, Intune (Win32 apps), or virtualised delivery (App Volumes, Citrix/VDI).
- Legacy migration experience involving Windows 7 remediation, App-V sequencing, or VBScript/Batch conversion.
- Exposure to OS Deployment (OSD) task sequences and base gold-image creation.
- Relevant industry certifications (e.g., Flexera Certified, Microsoft Certified, or ITIL Foundation).
Randstad Technologies is acting as an Employment Business in relation to this vacancy.
...
