Senior Desktop Engineer

Davis Polk & Wardwell LLP•New York, NY

4d•$170,000 - $180,000

About The Position

The Senior Desktop Engineer is a client-focused role leading Level 3 support, administration, and engineering of desktop systems and end-user applications. The role contributes to designing, optimizing, and maintaining the desktop ecosystem to provide users with a seamless and efficient experience. The engineer works directly with end users, troubleshoots complex issues, and collaborates with desktop engineering and support teams, bringing hands-on technical expertise to strategic improvements in desktop infrastructure and application delivery.

Requirements

Seven or more years of experience in a related field.
Strong technical skills, attention to detail, and excellent oral and written communication skills.
Creative thinking and proven problem-solving ability.
Strong interpersonal skills and ability to work in a highly collaborative, flat organization.
Strong proficiency in Windows 365, Microsoft Intune, Azure Active Directory (Microsoft Entra ID), and Microsoft 365 apps.
Demonstrated ability to use PowerShell and Microsoft Graph API for automation.
Deep understanding of operating system deployment, GPO migration to Intune, and VDI troubleshooting.
Bachelor's degree preferred.

Nice To Haves

Experience in a professional services organization.
Knowledge of Ivanti AppSense tools.
Microsoft Entra ID administration experience, including user and group lifecycle, RBAC, and PIM.
Experience with BitLocker and Intune key escrow.
Experience with Windows Autopilot deployment, including Autopilot Reset and pre-provisioning.
Experience supporting enterprise document management systems such as iManage Work.
Experience with Microsoft 365 integrations, including SharePoint Online, OneDrive, and Teams administration.
Experience with RECAST Application Workspace.
Experience creating MECM SSRS reports and some knowledge of MS SQL and PowerBI.
Experience using Flexera AdminStudio for application packaging.

Responsibilities

Deploy, track, and report on compliance for operating system, software, and third-party patches.
Identify defects and deficiencies in client management tools or processes, develop remediation plans, and implement them.
Deploy and troubleshoot applications using MECM, including troubleshooting the MECM agent and patching.
Create SSRS reports for MECM, with some knowledge of MS SQL and PowerBI.
Resolve patching and software deployment issues using remote management tools.
Provide Level 3 Windows desktop and laptop support and administration.
Administer Microsoft 365 Apps, including deployment with C2R/ODT, update channel management, tenant configuration, and user and license administration through M365 Admin Center and PowerShell.
Package applications in MSI and MSIX/MSIXbundle formats, preferably using Flexera AdminStudio, and convert packages to .intunewin Win32 apps.
Work with and troubleshoot desktop builds using MECM OSD.
Participate in standard image development, management, quality assurance testing, and deployment.
Support MECM hybrid-joined devices and co-management, including configuration, compliance, Conditional Access, scripts, and remediations, as well as Microsoft Intune device profiles, compliance policies, application deployment, and Proactive Remediations.
Administer and troubleshoot Active Directory, DNS, DHCP, GPO, and Microsoft Entra ID, including hybrid identity, Conditional Access policies, and MFA/SSPR.
Troubleshoot multi-tier applications and systems.
Use PowerShell for scripting and automation against Microsoft Graph API and Entra ID, and work with scripted Intune remediations and Azure automation runbooks.
Support Windows servers, including virtual machines.
Support Azure Virtual Desktop, including host pool provisioning, session host image management, FSLogix profile containers, and application delivery; work with scaling plans and Azure Monitor.
Support highly mobile users and iOS and iPadOS systems through Microsoft Intune.
Create and maintain detailed system documentation.