Hello — I'm Darshit ✳

EUC & Windows Server Tech Lead · London, UK

I keep enterprise endpoints secure, compliant, and shipped — not just patched.

Senior EUC and Windows Server specialist with 15+ years delivering secure, scalable, and modern endpoint solutions across financial services, healthcare, and public sector environments. Expert in Intune, MECM/SCCM, Azure AD/Entra ID, Windows 11, and macOS.

15+ years enterprise EUC SC Cleared · valid until 2030 7 Microsoft certifications Financial services · Healthcare · Public sector
01 · Profile

What I actually do.

Not another buzzword list — the toolchain and disciplines behind every enterprise estate I've touched.

I design and run modern device management for organisations that can't afford downtime or a compliance miss — think asset managers, insurers, and public health bodies. Intune, Autopilot, MECM/SCCM, Entra ID, and Windows Server are the daily toolkit; CIS benchmarks, Secure Boot, and LAPS are the guardrails I build in from day one.

Most of what I do is unglamorous by design: ring-based rollouts that don't break anyone's morning, remediation scripts that quietly keep compliance dashboards green, and documentation thorough enough that the next engineer doesn't need to ping me. I've done this across Janus Henderson, AIG, Columbia Threadneedle, Public Health England, and BMO — regulated environments where "it works on my machine" isn't good enough.

The part I like most is the migration work — Windows 10 to 11, on-prem GPO to Intune, legacy AD to Entra ID — where the real job is making a few thousand endpoints change underneath people without them noticing.

Based in
Stanmore, London (HA7)
Focus areas
Intune · MECM/SCCM · Entra ID · Windows 11 · macOS
Clearance
SC Cleared, valid until 2030
Industries
Financial services, healthcare, public sector
Education
M.Sc. Computer Networks, Middlesex University
02 · Competencies

Core competencies.

The disciplines that show up on every engagement, regardless of client.

Modern Device Management

Intune, Autopilot, Azure Virtual Desktop, macOS Platform SSO — cloud-first endpoint strategy end to end.

Microsoft Infrastructure

Active Directory, MECM/SCCM, Group Policy, and Windows Server administration at enterprise scale.

Cloud & Security

Azure AD/Entra ID, Microsoft Defender, CIS Benchmarks, and Secure Boot certificate migrations.

Endpoint Security & Compliance

LAPS, vulnerability remediation, and security baseline design, testing, and enforcement.

Automation & Scripting

PowerShell-driven compliance reporting and remediation that keeps dashboards honest.

Application Packaging & Deployment

Enterprise application lifecycle management across both Windows and macOS estates.

Project Delivery

Agile/Scrum delivery, stakeholder engagement, and vendor management on multi-team rollouts.

03 · Experience

Recent roles.

See the full work history and CV →

Feb 2026 – Current

Senior Client Technology Analyst (EUC)

Janus Henderson Investors, London — Permanent

  • Managing enterprise Windows and macOS endpoints using Intune, MECM/SCCM, Entra ID, and Citrix.
  • Leading CIS baseline design, testing, and deployment for Windows 11, M365 Apps, Edge, and Chrome.
  • Driving modern management initiatives including macOS Platform SSO, LAPS, and cloud-first endpoint strategy.
Intune · MECM/SCCM · Entra ID · Citrix
Aug 2025 – Feb 2026

Senior Windows Engineer (EUC)

Zero-Plus Ltd. — Contract · SC Clearance until 2030

  • Delivered daily support for enterprise endpoints via VMware Workspace ONE UEM.
  • Troubleshot Windows, macOS, iOS, and Android authentication, SSO, and configuration issues.
  • Collaborated with security teams to remediate vulnerabilities and optimise UEM policies.
Aug 2024 – Aug 2025

Senior Client Technology Analyst (EUC)

Janus Henderson Investors, London

  • Led CIS baseline design, testing, and deployment for Windows 11, M365 Apps, Edge, and Chrome.
  • Delivered macOS Platform SSO, LAPS, and cloud-first endpoint strategy.
  • Built PowerShell automation, remediation scripts, and compliance dashboards.
  • Led Secure Boot certificate migration and vulnerability remediation tracking.
Dec 2023 – Jul 2024

Senior EUC Consultant (3rd Line)

AIG – Life, London — Contract

  • Managed SCCM patch deployment across the enterprise estate.
  • Ensured CIS compliance for EUC devices; integrated Microsoft Store for Business with SCCM.
May 2022 – Oct 2023

Senior EUC Consultant (3rd Line)

Columbia Threadneedle Investments, London — Contract

  • Deployed Windows 10 & Server images via SCCM Task Sequences.
  • Migrated GPOs to Intune for modern management; managed DNS and vulnerability remediation via Qualys.
04 · Credentials

Certifications.

Maintained current across the Microsoft Modern Endpoint and Azure tracks.

Microsoft

Azure Administrator Associate

Microsoft

Microsoft 365 Enterprise Administrator Expert

Microsoft

Modern Desktop Administrator Associate

AZ-140

Azure Virtual Desktop

AZ-303 / AZ-304

Azure Architecture

MS-500

Security Administrator Associate

ITIL

ITIL v2 Foundation