Sr. Windows and Desktop Engineer

SBC Innovations•Washington, DC

13d•Onsite

About The Position

SBC Innovations is seeking an experienced Desktop & Windows Engineer Subject Matter Expert (SME) to provide advanced engineering, development, testing, and operational support for enterprise Windows desktop environments. The position focuses on developing, implementing, and maintaining standardized Windows Operating System (OS) images, enterprise software deployment solutions, endpoint management technologies, and security configurations within a large-scale federal government environment. The ideal candidate possesses extensive experience with Windows 11, Microsoft Endpoint Configuration Manager (MECM), Microsoft Deployment Toolkit (MDT), Microsoft Intune, PowerShell automation, and enterprise endpoint security.

Requirements

Bachelor's degree in Computer Science, Business, or another relevant discipline. Ten (10) years of relevant professional experience may be substituted for the degree requirement.
Demonstrated expertise in Windows desktop engineering, enterprise operating system deployment, and endpoint management.
Experience supporting large-scale enterprise Windows environments.
Strong knowledge of enterprise security standards, patch management, and system configuration practices.
Must be able to obtain up to a Secret security clearance.
Candidates must be United States Citizens and meet applicable DOJ residency, background investigation, and security suitability requirements.
Must be U.S. Citizen
Must meet DOJ residency requirements
Must meet applicable federal background investigation and security suitability requirements
Must be able to obtain the required security clearance

Nice To Haves

Advanced PowerShell development, including custom modules and enterprise-scale workflow automation.
Cloud-based endpoint management using Microsoft Intune, Entra ID, Conditional Access, and Defender for Endpoint.
Modern provisioning technologies, including Windows Autopilot, Enrollment Status Page (ESP) customization, and scripted deployments.
Zero Trust endpoint security principles and secure configuration baselines.
Public Key Infrastructure (PKI), certificate services, and enterprise certificate management.
Advanced Windows troubleshooting using Process Monitor (ProcMon), WinDbg, symbols, and performance analysis tools.

Responsibilities

Develop, test, implement, and maintain enterprise Windows desktop operating system images.
Engineer and support large-scale software deployments using MECM, MDT, and Configuration Manager Operating System Deployment (OSD).
Develop, test, and deploy software distribution packages, application updates, and system configurations across desktops, laptops, tablets, and servers.
Design and implement automated Windows desktop and server deployment processes.
Develop and maintain PowerShell and VBScript automation for system configuration, software installation, and troubleshooting.
Support enterprise patch management solutions, including HCL BigFix, Windows Update, and MECM.
Analyze, evaluate, and recommend enterprise desktop, laptop, tablet, and server hardware.
Implement endpoint security configurations, vulnerability remediation, and compliance controls.
Troubleshoot complex Windows operating system, application, deployment, and hardware issues.
Provide technical recommendations and engineering solutions to meet enterprise operational requirements.
Provide subject matter expertise in the design, development, testing, deployment, and maintenance of Windows desktop operating system images.
Engineer robust enterprise deployment solutions using MECM, MDT, OSD, Microsoft Intune, and related endpoint management technologies.
Develop and maintain software installation packages, deployment sequences, and automated provisioning processes.
Support Windows 11 operating system architecture, configuration, and enterprise integration.
Administer and support Active Directory, Group Policy Objects (GPOs), Organizational Units (OUs), and domain services.
Implement device management policies, compliance configurations, and Windows Update for Business.
Develop automation scripts for operating system deployment, configuration management, reporting, and troubleshooting.
Manage enterprise device drivers, firmware updates, hardware standards, and lifecycle processes.
Support enterprise networking configurations, including DNS, DHCP, VPN connectivity, and certificate management.
Implement endpoint security technologies, including BitLocker, Microsoft Defender for Endpoint, application control, and privilege management.
Perform vulnerability scan reviews, security assessments, patch management, documentation, and auditing activities.
Support virtualization technologies, including Virtual Desktop Infrastructure (VDI) and Hyper-V.
Provide technical documentation, engineering recommendations, and operational support for enterprise desktop infrastructure.