Desktop & Windows Engineer /SME

SYSTEMTEC•Columbia, SC

2d•Onsite

About The Position

SYSTEMTEC is seeking a Desktop & Windows Engineer /SME for a on-site opportunity for candidates in Washington D.C. or Columbia, SC. Candidate will serve as a senior technical authority for enterprise desktop and Windows engineering, focusing on operating system image development, testing, deployment, endpoint management, and security. The role will help design and maintain scalable Windows environments while supporting automation, patching, vulnerability remediation, and complex endpoint issues.

Requirements

Applicants must be authorized to work for any employer in the U.S. We are unable to provide sponsorship or work with Third-Party agencies.
Bachelor's degree in Computer Science, Business, Information Technology, or another relevant discipline; 10 years of relevant professional experience may substitute for the degree requirement.
10+ years of relevant desktop, Windows engineering, endpoint management, or systems administration experience.
Deep knowledge of Windows 11 architecture, configuration, troubleshooting, and enterprise administration.
Advanced experience with Active Directory, Group Policy, organizational units, and Windows domain services.
Hands-on experience with enterprise imaging and deployment technologies such as Microsoft Deployment Toolkit (MDT), MECM/SCCM, Operating System Deployment (OSD), Autopilot, or Intune.
Strong PowerShell scripting capabilities for automation, reporting, administration, and troubleshooting.
Experience with endpoint patching, software distribution, configuration management, vulnerability remediation, and security compliance.
Knowledge of enterprise networking fundamentals, including DNS, DHCP, VPN, and digital certificates.
Ability to obtain and maintain the required Public Trust and security clearance eligibility, potentially up to a Secret clearance.

Nice To Haves

Advanced PowerShell development, including custom modules and enterprise-scale automation.
Strong experience with Intune, Azure AD/Entra ID, Conditional Access, and Defender for Endpoint.
Modern Windows provisioning and deployment experience, including Autopilot and customized enrollment workflows.
Knowledge of Zero Trust endpoint security concepts and secure configuration baselines.
Experience with PKI, certificate services, and enterprise certificate management.
Windows troubleshooting experience using tools such as ProcMon, WinDbg, performance analyzers, and system diagnostic utilities.
Experience with BitLocker, application control, privilege management, and endpoint security technologies.
Familiarity with VDI and Hyper-V environments.
Programming experience with C#, Visual Basic, or .NET technologies.

Responsibilities

Design, develop, test, and maintain standardized Windows desktop and server operating system images for enterprise deployment.
Engineer and optimize large-scale software and operating system deployment solutions using technologies such as MECM, MDT, OSD, Autopilot, and Intune.
Develop and maintain software distribution packages, application updates, drivers, firmware configurations, and deployment workflows for enterprise endpoints.
Build PowerShell and other automation solutions to streamline provisioning, administration, reporting, troubleshooting, and operational processes.
Support enterprise patching and vulnerability remediation programs while reviewing security findings and assisting with audits, assessments, and compliance activities.
Provide advanced technical troubleshooting and recommendations involving Windows endpoints, applications, hardware, security controls, virtualization, and enterprise configuration.