Desktop Engineer
Full Job Posting
Key Responsibilities
- Windows Engineering & Endpoint Platform
- Engineer, maintain, and optimize a global Windows 11 desktop environment, ensuring stability, performance, and security.
- Own OS image engineering, lifecycle management, configuration baselines, and feature update strategies.
- Lead complex troubleshooting efforts using logs, diagnostics, and telemetry.
- Modern Device Management
- Design, implement, and manage Microsoft Intune for configuration, policy enforcement, compliance, application packaging, and advanced device management.
- Lead Windows Autopilot deployments, provisioning workflows, and zero‐touch onboarding processes.
- Integrate Intune with Azure AD, security baselines, conditional access, and compliance frameworks.
- MECM (Microsoft Endpoint Configuration Manager)
- Drive all aspects of MECM administration and engineering, including:
- Task sequence creation and optimization (OSD, refresh, break/fix workflows)
- Patch management and compliance reporting
- Infrastructure health and performance tuning
- Implement and automate MECM‐related processes to reduce operational overhead.
- Automation & PowerShell Development
- Design and maintain advanced PowerShell automation for:
- Automation
- Configuration enforcement
- Remediation scripts
- User provisioning
- Data transformation and reporting
- Develop reusable automation modules that support engineering and operational workflows.
- Monitoring & Digital Experience (Nexthink – Nice to Have)
- Use Nexthink (or similar DEX tools) to monitor endpoint performance, identify trends, and proactively improve user experience.
- Develop custom remote actions, dashboards, and investigations (if Nexthink is available).
- Operational Excellence
- Provide 3rd‐line engineering support for escalated desktop issues, including collaboration with security, networking, server engineering, and service desk teams.
- Participate in an on‐call rotation and support planned weekend engineering activity for global deployments.
- Maintain detailed documentation, runbooks, and architecture diagrams.
- Contribute to strategic projects such as hardware refresh, OS migrations, security initiatives, and global transformation programmes.
- Required Skills & Experience
- Technical Expertise
- Extensive hands‐on experience with Windows 11 OS, including registry, file systems, event logs, troubleshooting techniques, and performance tuning.
- Deep knowledge of Intune, Autopilot, and Azure AD device management.
- Strong engineering‐level experience with MECM, including deployments, task sequences, and compliance.
- Advanced PowerShell developer, capable of writing clean, modular, production‐ready automation.
- Experience with enterprise patching, software distribution, and GPO/modern policy management.
- Bonus Skills
- Experience with Nexthink (dashboards, investigations, RA scripting).
- Knowledge of Active Directory, Group Policy, conditional access, and security baselines.
- Understanding of end‐user hardware (laptops, workstations, peripherals) and driver/firmware lifecycle management.
- Familiarity with virtualization (VDI), remote access technologies, and ITIL processes.
- Professional Skills
- Strong communication skills, able to work effectively with global teams and non‐technical users.
- Ability to manage multiple priorities in a high‐pressure environment.
- Proven experience driving improvements, standardization, and automation.
- Analytical mindset with strong attention to detail.
Education & Experience
- Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience.
- 5+ years of experience in desktop engineering or endpoint platform engineering within an enterprise environment.
- Prior experience in a global or highly regulated industry is a strong plus.
- Why Join Us?
- Opportunity to work with modern engineering workflows and cutting‐edge endpoint technologies.
- Influence global standards, architecture, and transformation initiatives.
- Work in a highly collaborative team with strong opportunities for career growth.
About TSG Risk Management
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at TSG Risk Management
Desktop Support Technician
San Francisco, USA
Desktop Support Analyst Position Summary We are seeking a Desktop Support Analyst to provide hands-on support to employees in a fast-paced, professional environment. This person should be comfortable taking ownership of
AVP, Workday Systems and Integrations
New York City, USA
Senior Desktop Support Engineer
New York City, USA
Senior Desktop Support Engineer Location: New York, NY Compensation: $85,000–$110,000 per year Schedule: Monday through Friday, 8-hour day shift Work Location: In person Job Summary We are seeking an experienced Senior D
Python AI Developer - Microsoft Copilot Studio
New York City, USA
Python AI Developer - Microsoft Copilot Studio Location: New York City, NY (Hybrid) Salary: $100,000 Employment Type: Full-Time Work Authorization: Candidates must be authorized to work in the United States without curre
Senior Cribl Engineer / Security Data Engineer
Charlotte, USA
Cribl Data Engineer, Cybersecurity and SIEM
Charlotte, USA
Senior Cybersecurity Data Science & Analytics Lead
New York City, USA
Desktop Support Technician
San Francisco, USA
AVP, Workday Systems and Integrations
New York City, USA
Desktop Support Technician
New York City, USA
Senior Desktop Support Engineer
New York City, USA
Python AI Developer - Microsoft Copilot Studio
New York City, USA
Senior Cribl Engineer / Security Data Engineer
Charlotte, USA
Cribl Data Engineer, Cybersecurity and SIEM
Charlotte, USA
Senior Cybersecurity Data Science & Analytics Lead
New York City, USA