Senior EUC Engineer

TEKsystems • Columbia, MD

9d • $25 - $35 • Onsite

About The Position

We are looking for a senior, hands-on EUC Engineer to build, run, and support a 100% cloud-native digital workspace. The role combines engineering across virtual desktops, endpoint management, application control, privilege management, secure access, operating-system lifecycle management, and onsite desktop support. The engineer will serve as the technical expert for the EUC stack and escalation point for complex issues while remaining visible and approachable to onsite end users.

The role engineers and supports Omnissa Horizon Cloud (DaaS) on Azure, App Volumes, and Dynamic Environment Manager; administers Intune and Workspace ONE UEM; manages endpoint security and access controls; and owns the Windows and macOS operating-system lifecycle. It also involves automation, monitoring, onsite device and user support, change and problem management, technical documentation, mentoring, and contributing to the EUC roadmap.

This is a contract position based in Columbia, Maryland, and is fully onsite. The stated pay range is $25.00–$35.00 per hour. The anticipated application deadline is November 7, 2026. Eligible benefits for this temporary role may include medical, dental, and vision coverage; critical illness, accident, and hospital coverage; a 401(k) retirement plan; life and disability insurance; a Health Spending Account; transportation benefits; an Employee Assistance Program; and time off or leave.

Requirements

• At least 7 years of experience in EUC, endpoint engineering, VDI, or desktop support and engineering.
• Hands-on production experience with Omnissa Horizon Cloud/DaaS, App Volumes, and DEM.
• Strong Microsoft Intune, Entra ID, and Conditional Access skills.
• Working experience with Workspace ONE UEM.
• Hands-on experience with at least three of BeyondTrust EPM, Airlock Digital, Netskope, ControlUp, and PDQ Connect.
• Solid Azure knowledge covering networking, identity, VDI compute and storage, and governance.
• Strong PowerShell scripting skills and familiarity with infrastructure as code and CI/CD.
• Understanding of Zero Trust, least privilege, and application-control principles.
• Proven onsite desktop-support experience and strong customer-service skills.
• Demonstrated experience assessing OS upgrades, resolving compatibility issues, and governing phased endpoint deployments.
• Ability to design solutions and write clear technical documentation.
• Customer-focused, calm under pressure, and a clear communicator with technical and non-technical users.
• Security-minded, decisive, collaborative, and thorough in documentation.

Nice To Haves

• Microsoft MD-102 or AZ-104, Omnissa Horizon or Workspace ONE, and ITIL Foundation certifications.
• Experience migrating between Intune and Workspace ONE.
• Autopilot, Win32/MSIX packaging, and Windows 11 migration experience.
• Experience supporting macOS lifecycle management and enterprise OS-upgrade programs.

Responsibilities

• Engineer and support Omnissa Horizon Cloud (DaaS) on Azure, including Horizon Edge, Universal Broker, Unified Access Gateway, pools, and entitlements.
• Build and manage App Volumes, including application packaging, app stacks and packages, writable volumes, assignments, lifecycle, and performance tuning.
• Configure Dynamic Environment Manager (DEM) for user personalization, policy, and profile management.
• Own the golden-image lifecycle, including automated builds, optimization, patching, versioning, and rollback.
• Administer Microsoft Intune for endpoints, including Autopilot, compliance, configuration profiles, Win32/MSIX applications, update rings, and Conditional Access integration.
• Manage Workspace ONE UEM, including coexistence with Intune and migration where appropriate.
• Use PDQ Connect for cloud-based software deployment, inventory, and rapid remediation.
• Maintain endpoint baselines, hardening standards, and zero-touch provisioning.
• Own the Windows and macOS endpoint operating-system lifecycle, including standards, build strategy, configuration, patching, upgrades, rollback, and retirement.
• Assess OS currency, vendor supportability, hardware readiness, security exposure, application dependencies, driver compatibility, and user impact.
• Evaluate proposed OS upgrades and provide technical recommendations based on business requirements, device readiness, application compatibility, security risk, and vendor-support timelines.
• Develop OS upgrade plans covering discovery, readiness assessment, pilot deployment, testing, phased rollout, rollback, validation, and post-deployment support.
• Make technical decisions about OS configuration, patching, upgrade readiness, deployment sequencing, exception handling, and issue remediation within architecture, security, and change-management standards.
• Perform upgrade-readiness assessments, including hardware and driver validation, application testing, encryption, endpoint-security controls, network access, and user-impact analysis.
• Define and maintain standard endpoint builds, supported OS versions, configuration baselines, compliance policies, and upgrade success criteria.
• Use endpoint-management and automation tools to deploy OS updates, monitor adoption, identify failures, remediate issues, and report compliance.
• Create implementation plans, test evidence, change records, rollback procedures, operational documentation, knowledge articles, and stakeholder communications for OS changes.
• Coordinate OS upgrades with application owners, security, infrastructure, service management, vendors, and business stakeholders.
• Manage BeyondTrust EPM policies for least privilege, elevation requests, and application rules.
• Operate Airlock Digital allowlisting, including baselining, trusted publishers and paths, exception handling, and policy changes.
• Work with SecOps on vulnerability remediation, incident response, and audit evidence.
• Use ControlUp for real-time monitoring, root-cause analysis, and automated remediation across VDI and physical endpoints.
• Build dashboards and KPIs for performance, availability, and user experience.
• Manage Wyse Management Suite (WMS).
• Automate endpoint and workspace operations with PowerShell, Microsoft Graph API, Terraform, Bicep, and related tooling.
• Provide deskside and walk-up support for laptops, desktops, thin clients, peripherals, docking stations, and meeting-room technology.
• Perform hands-on device provisioning and Autopilot onboarding, reimaging or reset, hardware swaps, device refresh, and Windows 11 upgrade activities.
• Handle joiner, mover, and leaver device activities, including asset tagging, handover, collection, and secure disposal.
• Troubleshoot onsite issues across Windows, macOS, mobile devices, printing, Wi-Fi, VPN/ZTNA, VDI clients, and Microsoft 365 applications.
• Support VIP and executive users, onsite events, town halls, and office moves.
• Coordinate with vendors for hardware repairs, warranty claims, and logistics.
• Maintain accurate asset inventory, spares, and stock levels at each site.
• Log and manage tickets in ITSM platforms such as ServiceNow or Jira, meet SLAs, and take ownership of complex problems.
• Act as the service desk escalation point, perform problem management, and write runbooks and knowledge articles.
• Plan and run changes, testing, and phased rollouts.
• Mentor junior engineers and desktop support technicians.
• Contribute design input and technical recommendations to the EUC roadmap.

Benefits

• Medical, dental, and vision coverage, subject to eligibility and plan terms.
• Critical illness, accident, and hospital coverage, subject to eligibility and plan terms.
• 401(k) retirement plan, with pre-tax and Roth post-tax contributions available.
• Voluntary life and AD&D insurance for the employee and dependents.
• Short- and long-term disability coverage.
• Health Spending Account (HSA).
• Transportation benefits.
• Employee Assistance Program.
• Time off or leave, which may include PTO, vacation, or sick leave.

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed