Desktop Engineer

The Desktop & Applications Lead Engineers’ primary responsibilities include supporting lifecycle management and delivery of Windows desktops and applications using both modern and legacy endpoint management solutions. Includes hardware, firmware, OS and application deployment, Windows and applications updates, patching, configuration, QA testing, and documentation. Specific technical activities and work products will include:

· Installation, Configuration, Maintenance, and Support of Physical and Virtual Endpoint Devices

o Install, update, configure, and manage BIOS and UEFI manually and via endpoint management tools.

o Configure, manage, and troubleshoot Windows services, features, settings, tasks, and processes.

o Configure, manage, and troubleshoot Windows networking, device drivers, peripherals.

o Perform remote management using tools such as WMI, WinRM, PowerShell, and Remote Desktop

o Configure and troubleshoot Windows and applications using Event Viewer, Local Security Policies, Local User Manager, RegEdit, Intune Management Engine

o Develop automated Windows deployment and servicing sequences using MECM, MDT, Intune Autopilot, Autopatch, and WSUS

· Deployment and Management of Virtual Endpoint Devices

o Provision and configure Azure Active Directory (Entra) tenants and identities.

o Install, configure, and integrate Azure AD Connect

o Provision, configure, and manage Azure Subscriptions, Resource Groups, Roles based Access Controls

o Create, configure, and support Azure Blob and Azure Files storage.

o Size, locate, configure, and deploy Azure Virtual Machines and Host Pools

o Create, configure, and manage Azure Virtual Desktop images and managed disks.

· Advanced Deployment and Virtualization of Applications

o Create, configure, deploy, and manage MECM Packages and Applications

o Create, configure, manage, and deploy Intune Win32 Apps

o Create, configure, test and support FSLogix App Masking rules.

o Deploy and manage Windows applications via MECM and Intune using Task Sequences, Autopilot provisioning, Software Center, and Company Portal

· Configuration and Deployment of Custom Endpoint Configurations via Active Directory, Group Policy, and Intune

o Manage devices, users, groups, and applications via Active Directory Services and Azure Active Directory

o Create, link or assign, filter, prioritize, and troubleshoot Group Policy Objects and Intune CSP Policies

o Deploy, update, and manage Group Policy Administrative Templates in the domain and Central Store

o Configure and troubleshoot Group Policy and CSP settings for Windows, Office, and other applications.

o Implement Group Policy Preferences with Item-level Targeting (Registry, Files, Drive Maps, etc.)

o Develop PowerShell scripts to manage Windows features, files, and registry to customize configurations.

· Configuration, Management, and Migration of User Profiles and Well-Known Folders on Premises and On Cloud

o Create, develop, evaluate, and support custom configurations of FSLogix and other leading profile solutions.

o Support and extend profile migration routines and procedures based in PowerShell.

o Implement and support user shell folder / well-known folder redirection to network and cloud storage.

o Diagnose and remedy user settings and data persistence to resolve performance and migration issues.

o Provision and configure OneDrive for Business and use the SharePoint migration tool to move user files.

Potential Candidate’s Relevant Experience:

· 10-15 years’ experience with Windows OS & application installation, packaging, configuration, and support

· PowerShell automation experience a plus but not required.

· Microsoft Endpoint Manager / Configuration Manager / Intune / Autopilot experience required.

· Excellent research, documentation, and written communications skills

· Extraordinary attention to detail and analytical problem solving and troubleshooting skills.