Sr. Desktop Engineer

Overview

Senior Desktop Engineer provides technical leadership for the enterprise endpoint computing environment in a highly regulated industry. This role is responsible for the design, deployment, security, and compliance of desktop and mobile endpoints, while also guiding day-to-day activities of the desktop support team through task delegation, mentoring, and operational oversight. The Lead Desktop Engineer serves as a Senior technical escalation point and a key partner to security, risk, and compliance teams.

Technical Leadership & Endpoint Engineering

• Lead the engineering, deployment, and lifecycle management of desktop, laptop, and mobile endpoint environments in compliance with enterprise and regulatory standards.
• Architect and maintain modern endpoint management solutions (e.g., Microsoft Intune, or equivalent), including deployment workflows, configuration profiles, and compliance policies.
• Establish and enforce endpoint standards, baselines, and best practices for security, performance, and user experience.
• Oversee application packaging, testing, deployment, and lifecycle management in alignment with change and compliance requirements.
• Serve as the highest-level escalation point for complex endpoint incidents and problems.

Compliance, Security & Vulnerability Management

• Own endpoint-related compliance controls, ensuring devices meet regulatory, audit, and internal security requirements.
• Lead endpoint vulnerability management activities, including patch compliance, remediation planning, and coordination with information security teams.
• Monitor and remediate endpoint security posture, including encryption, endpoint protection/EDR, configuration baselines, and device health.
• Support internal and external audits by maintaining documentation, evidence, and control artifacts related to endpoint management.
• Partner with risk, security, and compliance stakeholders to continuously improve endpoint control maturity.

Team Leadership & Operations

• Assist with day-to-day technical leadership to desktop technicians and engineers, including task delegation, prioritization, and workload coordination.
• Mentor and coach team members to develop technical skills, operational maturity, and adherence to standards and processes.
• Review work quality, documentation, and ticket resolution to ensure consistency and compliance.
• Develop and maintain standard operating procedures, runbooks, and knowledge base content.
• Assist with onboarding and training of new team members.

Endpoint Support & Service Delivery

• Coordinate workstation deployments, hardware refreshes, and user onboarding activities.
• Ensure effective support for remote and hybrid workforce environments, including secure endpoint configurations.
• Oversee incident, request, and change activities related to endpoints, ensuring adherence to established ITSM processes.
• Maintain accurate asset inventory, endpoint lifecycle records, and compliance documentation.
• Research and evaluate emerging endpoint, automation, and compliance technologies to drive continuous improvement.

• Advanced knowledge of enterprise desktop and mobile endpoint environments.
• Extensive experience with Windows endpoint administration and support.
• Strong hands‑on experience with modern endpoint management platforms such as Microsoft Intune or equivalent.
• Experience designing and maintaining automated or zero‑touch deployment solutions.
• Demonstrated experience implementing endpoint security, compliance, and configuration policies.
• Working knowledge of vulnerability management processes and compliance frameworks within regulated environments.
• Experience with application packaging and enterprise software deployment.
• Ability to lead technical initiatives and make architectural decisions within scope.
• Proven ability to delegate tasks, mentor team members, and provide technical guidance.
• Strong written and verbal communication skills, including documentation suitable for audits and executive review.
• Minimum of five years of related experience in desktop engineering or endpoint management, including a Senior or lead role.
• Relevant certifications preferred (e.g., Microsoft Endpoint, Intune, security…