We are seeking a Senior Desktop Engineer to design, implement, and optimize enterprise endpoint infrastructure. This role will focus on modernizing desktop environments, improving automation, and strengthening endpoint security across a large-scale organization supporting both physical and virtual desktops.

Key Responsibilities

Endpoint Strategy & Architecture

• Develop roadmap for endpoint infrastructure, OS lifecycle, and tooling strategy
• Design Desktop-as-a-Service (DaaS) environments (AWS Workspaces, Windows 365)
• Define enterprise standards for endpoint configurations and user experience
• Evaluate and align solutions with security frameworks and compliance requirements

Engineering & Automation

• Build and manage endpoint environments using Microsoft Intune, SCCM (MECM), and JAMF
• Develop automation using PowerShell or Python for provisioning and deployment
• Implement automated imaging, patching, and software distribution processes
• Migrate legacy GPOs to modern Intune-based management

Security & Compliance

• Implement endpoint security controls (BitLocker, Defender, etc.)
• Ensure compliance with enterprise security policies and vulnerability remediation
• Conduct risk assessments for new technologies

Operations & Support

• Manage lifecycle of Windows and macOS devices
• Troubleshoot and resolve endpoint issues across physical and virtual environments
• Monitor performance, reliability, and availability
• Support ~2,300 endpoints and ~700 virtual desktops

Documentation & Collaboration

• Create architecture diagrams, SOPs, and technical documentation
• Provide knowledge transfer to internal teams
• Collaborate with infrastructure, security, and application teams

Required Qualifications

• 10+ years supporting Windows/macOS endpoint environments
• 7+ years with enterprise endpoint management (Intune, SCCM, JAMF)
• 5+ years with Desktop-as-a-Service (AWS Workspaces, Windows 365)
• 5+ years scripting/automation (PowerShell or Python)
• Strong experience with imaging, patching, software packaging, and deployment

Preferred Qualifications

• Microsoft certifications (M365 Endpoint Admin, Modern Desktop, Windows Server)
• Experience with public sector or regulated environments
• Experience migrating GPO to Intune
• Hands-on with Windows 11 and macOS enterprise environments
• Strong communication and consulting experience