Desktop Engineer

Savannah River National Laboratory•Aiken, SC

About The Position

The Desktop Engineer ensures reliable, secure, and high-performing desktop, laptop, mobile, and peripheral hardware and software operations. The role works with a team of engineers on device lifecycles and modern IT automation. Responsibilities include administering endpoint management platforms and configuration tools, managing enterprise endpoint patches, coordinating workstation authentication and security controls, validating endpoint monitoring integrations, maintaining workstation engineering documentation, resolving enterprise endpoint incidents, and participating in Change Advisory Board reviews.

Requirements

Bachelor's degree and 0–3 years of relevant experience, or an associate degree with 4 years of relevant experience; 8 years of relevant experience may also be considered in lieu of a degree.
Collaborate with other staff to research and resolve problems.
Demonstrate confidence, teamwork, collaboration, and effective communication with senior management, end users, and other customers.
Maintain knowledge of technology innovations and trends.
Communicate with personnel at all levels, including senior executives.
Be a U.S. citizen, as legally required to obtain and maintain a security clearance.

Nice To Haves

Experience engineering enterprise Windows desktop environments and secure configuration baselines.
Knowledge of endpoint management platforms such as Intune or similar device management tools.
Experience administering endpoint patch management and application deployment processes.
Familiarity with endpoint encryption, Defender security controls, and compliance reporting.
Experience integrating workstation logs with SIEM platforms.
Knowledge of lifecycle refresh planning and endpoint inventory management.
Microsoft Certified: Endpoint Administrator Associate certification.
CompTIA Security+ certification.

Responsibilities

Administer Microsoft Intune and related configuration management tools to enforce patch compliance, device encryption, application deployment standards, and endpoint security configurations aligned with cybersecurity control frameworks.
Manage enterprise endpoint patch cycles, including timely vulnerability remediation, documentation in ITSM change workflows, and validation of successful deployment before closure.
Collaborate with Identity, Credential, and Access Management teams to ensure workstation authentication controls, MFA enforcement, certificate deployment, and conditional access work correctly with Microsoft Entra ID and Microsoft 365.
Validate endpoint log forwarding and integration with enterprise monitoring platforms to provide visibility into device health, configuration compliance, and potential security anomalies.
Produce and maintain workstation engineering documentation, including gold image standards, configuration baselines, lifecycle refresh schedules, and compliance dashboards.
Support root cause analysis for enterprise-wide endpoint incidents, configuration conflicts, and patch deployment failures; implement corrective actions to prevent recurrence.
Participate in Change Advisory Board reviews to assess risk and approve major workstation environment changes before deployment.

Benefits

Medical, dental, and vision options, including HSA options with a company-provided seed.
Company-paid short- and long-term disability.
Company-paid non-contributory life insurance equal to one times salary.
Company-paid non-contributory AD&D insurance equal to one times salary.
Savings and investment plan with a qualified non-elective company contribution of 5% each pay period with immediate vesting.
Company match of 50 cents per dollar up to 8%, with five-year vesting in the company match.
Contributory life insurance up to five times salary, with a $1 million cap.
Contributory AD&D coverage for the employee, spouse, and children.
Paid time off.
Employee Assistance Plan.
Competitive relocation package; domestic and international relocation assistance is available for certain positions.