Sr Eng , Workstations-Workplace Technology Engineering

Summary

The Senior Engineer I – Workstations is responsible for the design, deployment, and management of Windows-based desktop environments using Microsoft Endpoint Configuration Manager (SCCM) and Intune while maintaining limited support for Apple macOS devices. This role acts as a subject matter expert (SME) in enterprise workstation management, ensuring system performance, security compliance, automation, and optimization. Additionally, this engineer will lead technical projects, mentor junior specialists, and contribute to strategic endpoint management initiatives.

No

Combination of Education and Experience will be considered. Must be authorized to work in the US as defined by the Immigration Act of 1986. Must pass a Criminal Background Check.

Bachelor’s Degree in information technology, Computer Science, or equivalent experience.

No

Minimum five (5) years of experience in endpoint management and desktop administration.

No

Valid/Unexpired Passport Book Valid/Unexpired Driver's License

No No

• Certifications such as Microsoft 365 Certified:
  Endpoint Administrator (MD-102), Microsoft Certified:
  Azure Administrator Associate, or ITIL Foundation.
• Strong expertise with Microsoft Endpoint Configuration Manager (SCCM), Microsoft Intune, and Group Policy.
• Proficiency in Windows 11 deployment, imaging, patch management, and application packaging.
• Basic experience supporting macOS devices, including Jamf or Intune for macOS.
• Familiarity with Power Shell scripting for automation and endpoint management.
• Hands‑on experience with Active Directory, Azure AD, and M365 endpoint security policies.
• Strong knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN, Wi‑Fi).
• Experience with Windows Autopilot, hybrid Azure AD join, and cloud‑based deployment strategies.
• Strong expertise with Microsoft Endpoint Configuration Manager (SCCM), Microsoft Intune, and Group Policy.
• Proficiency in Windows 11 deployment, imaging, patch management, and application packaging.
• Basic experience supporting macOS devices, including Jamf or Intune for macOS.
• Familiarity with Power Shell scripting for automation and endpoint management.

• Knowledge of Apple macOS management with Jamf Pro or Intune for macOS.
• Experience with enterprise security tools (e.g., Microsoft Defender for Endpoint, Crowd Strike).
• Proficiency in modern desktop management strategies (co‑management, cloud‑based device enrollment).
• Understanding of Zero Trust security models and endpoint compliance policies.
• Familiarity with Service Now or JIRA for ITSM/ticketing systems.

• Design, deploy, and manage Windows‑based endpoints using SCCM and Intune.
• Develop and maintain gold images, OS deployment, and task sequences.
• Manage software distribution, updates, and patch management for all Windows endpoints.
• Implement and maintain Windows security policies, including Bit Locker encryption, Defender for Endpoint, and conditional access policies.
• Maintain macOS endpoints at a minimal level, ensuring compliance and security integration.
• Utilize Power Shell scripting for task automation, system configuration, and reporting.
• Develop automated deployment solutions to improve efficiency and reduce manual processes.
• Implement compliance baselines and security configurations through Intune and SCCM.
• Lead and contribute to endpoint technology projects, including OS migrations, device refresh cycles, and cloud‑based endpoint management transitions.
• Research and recommend new endpoint management solutions to improve efficiency, security, and user experience.
• Maintain documentation of configurations, processes, and troubleshooting procedures.
• Act as an SME for Windows workstation management, providing technical expertise to IT teams.
• Serve as an escalation point for complex workstation‑related issues.
• Mentor junior specialists, providing guidance on troubleshooting, best practices, and career development.
• Develop and deliver training sessions on endpoint technologies and administration.
• Work closely with Networking, Security, Identity & Access…