About the role

  • Senior Desktop Engineer managing enterprise endpoint environments and delivering automated security solutions. Focused on Windows 11 provisioning and compliance for globally distributed users.

Responsibilities

  • Design, implement, and manage Microsoft Intune configuration profiles, compliance policies, and Mobile Application Management (MAM)
  • Deploy and manage Windows 11 devices using Autopilot, supporting zero-touch provisioning and maintaining imaging standards
  • Implement and maintain endpoint security controls, including Security Baselines, BitLocker, firewall configurations, and Conditional Access aligned with Zero Trust principles
  • Oversee operating system and application patching for workstation environments
  • Develop and maintain automation and reporting solutions using PowerShell for endpoint management tasks
  • Provide third-level support for complex device, application, and deployment issues, including root cause analysis and remediation
  • Manage the health, configuration, and patching of the Tanium platform
  • Identify, monitor, and remediate endpoint vulnerabilities, detect configuration drift, and enforce security policies
  • Develop custom and optimized scripts using PowerShell, Python, and Bash to automate workflows and execute large-scale endpoint changes
  • Utilize Tanium for asset discovery, inventory management, and reporting to deliver actionable insights
  • Scope, package, test, and deploy desktop applications across the enterprise environment
  • Ensure all solutions meet established supportability, compliance, and security requirements
  • Troubleshoot and remediate failed deployments to maintain overall deployment health
  • Build, maintain, and update gold images using standardized build-and-capture methodologies
  • Maintain task sequences to ensure alignment with current departmental and operational needs
  • Diagnose and resolve complex client issues using industry best practices and custom solutions
  • Identify, recommend, and implement improvements to enhance endpoint reliability and performance
  • Design and maintain CB/CI configurations and asset intelligence reporting
  • Develop and support automation workflows using ServiceNow or comparable platforms
  • Create, maintain, and update SOPs and technical documentation to support knowledge sharing and operational continuity
  • Develop self-service solutions for internal customers, including silent installers, remediation scripts, and data collection queries
  • Provide Tier 3 support and technical mentorship for SCCM, Intune, and/or Tanium teams and support technicians
  • Deliver SOP training and collaborate closely with Endpoint Engineering team members on escalations and solution development

Requirements

  • Deep expertise in Microsoft Intune & Tanium endpoint management systems
  • Strong proficiency with Windows 11 endpoint management; experience with macOS, iOS, and Android environments
  • Solid understanding of identity and security technologies, including Azure Active Directory (Entra ID), Active Directory Group Policy, and endpoint security controls
  • Proficiency in PowerShell scripting for automation, management, and reporting
  • 5+ years of experience in IT operations with a strong focus on endpoint engineering or endpoint management
  • Proven experience configuring, administering, and supporting the Tanium platform
  • Advanced scripting skills using PowerShell, Python, and/or Bash
  • Strong understanding of operating systems (Windows, Linux, macOS) and endpoint security principles
  • Demonstrated ability to troubleshoot and resolve agent-side and server-side issues in large-scale enterprise environments

Benefits

  • Health insurance
  • Paid time off
  • Flexible work arrangements
  • Professional development
  • Wellness programs

Job title

Senior Desktop Engineer

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job