01Key Responsibilities
Endpoint Engineering & Platform Lifecycle
Lead engineering design, development, standardization, and lifecycle management forWindows, macOS, and ChromeOSendpoints. Engineer and maintainenterprise OS images(Windows/macOS) and governChromeOS management and update strategy. Define and maintainhardware standards, perform OEM model testing, and managedrivers/BIOS/firmwareupdate processes. Develop and optimizeconfiguration baselines, performance settings, and endpoint hardening standards across platforms. Modern Endpoint Management (Intune / Autopilot / SCCM Co-Management)
Design and manageIntunepolicies for configuration, application deployment, compliance, and security baselines. LeadWindows Autopilotworkflows including device registration, profile assignment, join models (Hybrid/Azure AD), validation, and reset/reprovisioning processes. SupportSCCMinfrastructure for co-management scenarios, packaging, patching, and deployment pipelines. Drive strategy/roadmap across endpoint tooling includingIntune, SCCM, Ivanti, Tanium, JAMF, and Google Admin Console. VDI / DaaS Engineering
Optimize performance, patching, and application compatibility forVDI/DaaSplatforms (e.g.,Citrix Cloud, AWS WorkSpaces, AppStream, Cloud PC). Support specialized VDI requirements (M365 Products & Services on Citrix). Security, Risk, Compliance, and Audit Support
Act as the Desktop Engineering POC foraudit readiness, evidence collection, technical controls validation, and remediation tracking. Implement and maintain endpoint security controls (e.g.,Defender, ASR rules, BitLocker), and align configurations with relevant regulatory expectations (e.g.,SOX/PCI). ManagemacOS EFI/firmware/device password standardsand coordinateJAMFintegrations where required. Operational Excellence & Experience Analytics
Improve endpoint performance and user experience throughNexthink/telemetry insights and targeted remediation. Partner with Desktop Operations/ECC teams to transition engineered solutions into scalable production deployment and support. Lead root cause analysis for systemic endpoint issues and drive durable corrective actions. Evaluate new tools and modernization opportunities (e.g., Autopilot/Intune enhancements, Nexthink, Tanium, updated security baselines). Qualifications/
02Requirements
10 + yearsin Desktop Engineering, Modern Endpoint Management, or OS Platform Engineering or 12+ years of experience in lieu of a degree. Deep expertise inWindows 10/11 engineering(imaging, driver management, BIOS/firmware, GPO/Intune policy design). Strong experience withIntune, Autopilot, compliance policies, conditional access, andAzure AD join models / co-management architecture. Proficiency inmacOS engineering, including update governance, security controls, hardware baseline validation, andJAMF integration. Experience withChromeOSmanagement (automated enrollment, OU-based policy management .