Desktop Engineer

TSG Risk Management • Jersey City, NJ

2d

About The Position

We are seeking a highly skilled Desktop Engineer to join the global End User Computing team. This role engineers, deploys, automates, and supports the enterprise’s modern Windows desktop environment. The Desktop Engineer works with engineering teams, service operations, and security stakeholders to provide a secure, highly available, and seamless experience for end users in a fast-paced global environment.

The role covers Windows 11 engineering and lifecycle management; Microsoft Intune and Windows Autopilot; MECM administration and automation; advanced PowerShell development; endpoint monitoring and digital experience; and third-line engineering support. The position also contributes to hardware refreshes, OS migrations, security initiatives, and global transformation programmes.

The successful candidate has extensive Windows 11 experience, deep knowledge of Intune, Autopilot, and Azure AD device management, engineering-level MECM experience, and advanced PowerShell development skills. A bachelor's degree in a relevant field or equivalent professional experience and at least five years of desktop or endpoint platform engineering experience are required. Nexthink experience and prior work in a global or highly regulated industry are advantages.

Requirements

• Extensive hands-on experience with Windows 11, including registry, file systems, event logs, troubleshooting, and performance tuning.
• Deep knowledge of Intune, Autopilot, and Azure AD device management.
• Strong engineering-level experience with MECM, including deployments, task sequences, and compliance.
• Advanced PowerShell development skills, including writing clean, modular, production-ready automation.
• Experience with enterprise patching, software distribution, and GPO or modern policy management.
• Strong communication skills and ability to work effectively with global teams and non-technical users.
• Ability to manage multiple priorities in a high-pressure environment.
• Proven experience driving improvements, standardization, and automation.
• Analytical mindset and strong attention to detail.
• Bachelor's degree in Computer Science, Information Technology, or equivalent professional experience.
• At least 5 years of experience in desktop engineering or endpoint platform engineering within an enterprise environment.

Nice To Haves

• Experience with Nexthink, including dashboards, investigations, and remote action scripting.
• Knowledge of Active Directory, Group Policy, conditional access, and security baselines.
• Understanding of end-user hardware such as laptops, workstations, and peripherals, and driver/firmware lifecycle management.
• Familiarity with virtualization (VDI), remote access technologies, and ITIL processes.
• Prior experience in a global or highly regulated industry.

Responsibilities

• Engineer, maintain, and optimize a global Windows 11 desktop environment for stability, performance, and security.
• Own OS image engineering, lifecycle management, configuration baselines, and feature update strategies.
• Lead complex troubleshooting using logs, diagnostics, and telemetry.
• Design, implement, and manage Microsoft Intune for configuration, policy enforcement, compliance, application packaging, and advanced device management.
• Lead Windows Autopilot deployments, provisioning workflows, and zero-touch onboarding processes.
• Integrate Intune with Azure AD, security baselines, conditional access, and compliance frameworks.
• Administer and engineer MECM, including creating and optimizing task sequences for OSD, refresh, and break/fix workflows.
• Manage patching, compliance reporting, and MECM infrastructure health and performance tuning.
• Implement and automate MECM processes to reduce operational overhead.
• Design and maintain PowerShell automation for configuration enforcement, remediation, user provisioning, data transformation, and reporting.
• Develop reusable automation modules for engineering and operational workflows.
• Use Nexthink or similar digital experience tools to monitor endpoint performance, identify trends, and proactively improve user experience.
• Develop custom remote actions, dashboards, and investigations if Nexthink is available.
• Provide third-line engineering support for escalated desktop issues, collaborating with security, networking, server engineering, and service desk teams.
• Participate in an on-call rotation and support planned weekend engineering activity for global deployments.
• Maintain detailed documentation, runbooks, and architecture diagrams.
• Contribute to strategic projects such as hardware refresh, OS migrations, security initiatives, and global transformation programmes.

Benefits

• Opportunity to work with modern engineering workflows and cutting-edge endpoint technologies.
• Opportunity to influence global standards, architecture, and transformation initiatives.
• Highly collaborative team with strong opportunities for career growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior