Desktop Engineer

TSG Risk Management • Jersey City, NJ

3d

About The Position

The Desktop Engineer will join the global End User Computing team and engineer, deploy, automate, and support the enterprise’s modern Windows desktop environment. The role calls for deep technical expertise, strong problem-solving skills, and effectiveness in a fast-paced global environment. The engineer will collaborate with engineering teams, service operations, and security stakeholders to provide a secure, highly available, and seamless end-user experience.

The position focuses on Windows 11 engineering and endpoint platform management, Microsoft Intune and Autopilot, MECM administration, and advanced PowerShell automation. It also includes third-line support for escalated issues, participation in an on-call rotation and planned weekend engineering activity, documentation, and contributions to strategic global technology initiatives. Nexthink experience is useful but not required.

Requirements

• Extensive hands-on experience with Windows 11, including registry, file systems, event logs, troubleshooting, and performance tuning.
• Deep knowledge of Intune, Autopilot, and Azure AD device management.
• Strong engineering-level experience with MECM, including deployments, task sequences, and compliance.
• Advanced PowerShell development skills, including writing clean, modular, production-ready automation.
• Experience with enterprise patching, software distribution, and GPO or modern policy management.
• Strong communication skills and ability to work effectively with global teams and non-technical users.
• Ability to manage multiple priorities in a high-pressure environment.
• Proven experience driving improvements, standardization, and automation.
• Analytical mindset and strong attention to detail.
• Bachelor’s degree in Computer Science, Information Technology, or equivalent professional experience.
• At least 5 years of experience in desktop engineering or endpoint platform engineering within an enterprise environment.

Nice To Haves

• Experience with Nexthink, including dashboards, investigations, and remote-action scripting.
• Knowledge of Active Directory, Group Policy, conditional access, and security baselines.
• Understanding of end-user hardware such as laptops, workstations, and peripherals, and driver and firmware lifecycle management.
• Familiarity with virtualization (VDI), remote access technologies, and ITIL processes.
• Prior experience in a global or highly regulated industry.

Responsibilities

• Engineer, maintain, and optimize the global Windows 11 desktop environment for stability, performance, and security.
• Own OS image engineering, lifecycle management, configuration baselines, and feature update strategies.
• Lead complex troubleshooting using logs, diagnostics, and telemetry.
• Design, implement, and manage Microsoft Intune for configuration, policy enforcement, compliance, application packaging, and advanced device management.
• Lead Windows Autopilot deployments, provisioning workflows, and zero-touch onboarding.
• Integrate Intune with Azure AD, security baselines, conditional access, and compliance frameworks.
• Administer and engineer MECM, including creating and optimizing task sequences for OSD, refresh, and break/fix workflows; patch management and compliance reporting; and infrastructure health and performance tuning.
• Implement and automate MECM-related processes to reduce operational overhead.
• Design and maintain advanced PowerShell automation for configuration enforcement, remediation, user provisioning, data transformation, and reporting.
• Develop reusable automation modules for engineering and operational workflows.
• Use Nexthink or similar digital experience tools to monitor endpoint performance, identify trends, and proactively improve user experience.
• Develop Nexthink remote actions, dashboards, and investigations when available.
• Provide third-line engineering support for escalated desktop issues, collaborating with security, networking, server engineering, and service desk teams.
• Participate in an on-call rotation and support planned weekend engineering activity for global deployments.
• Maintain detailed documentation, runbooks, and architecture diagrams.
• Contribute to hardware refresh, OS migrations, security initiatives, and global transformation programmes.

Benefits

• Opportunity to work with modern engineering workflows and cutting-edge endpoint technologies.
• Influence over global standards, architecture, and transformation initiatives.
• Highly collaborative team with opportunities for career growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior