Systems Administrator

Seeking an experienced Windows OS engineer to serve as part of the Modern Endpoint Workspace Team responsible for engineering, automating, securing, and continuously evolving the Laboratory’s enterprise Windows endpoint platform. The position will focus on modern endpoint management, policy driven provisioning, application delivery, security compliance, lifecycle management, endpoint analytics, and employee experience. The role will utilize Dev Sec Ops  practices and systems management tools such as HCL Big Fix, Microsoft Endpoint Configuration Manager, Power Shell, Git, and application programming interfaces to improve reliability, security, and operational efficiency.

The position will collaborate closely with partnering teams of identity, cyber, network, service management, research IT, and the Laboratory’s Service Center to provide a consistent and supportable endpoint experience across supported Dell and Microsoft devices. Participation in an on-call rotation and occasional off-hour support is required, as is on-site troubleshooting when necessary. This position reports to the End Point Management group within the Laboratory’s Digital Solutions Department.

• Design and maintain automated endpoint provisioning and configuration workflows using HCL Big Fix, Microsoft Endpoint Configuration Manager and OEM provisioning capabilities.
• Create reusable automation and engineering solutions using Power Shell, Python, REST application programming interfaces, Git, and continuous integration and delivery practices.
• Apply configuration as code principles, automated testing, source control, peer review, and structured release practices to endpoint engineering changes.
• Plan and execute staged compatibility testing and deployment of Windows quality updates, feature updates, drivers, firmware, and security changes using deployment rings and controlled rollout strategies.
• Evaluate existing management workloads and identify opportunities for enhancement while maintaining support for environments with specialized requirements.

• Utilize HCL Big Fix for configuration settings, pushing OS and application updates and remediation fixlets.
• Use endpoint telemetry, experience analytics, service desk trends, and operational data to identify reliability, performance, configuration, and employee experience issues.
• Develop automated remediation for recurring endpoint health, configuration, performance, security, and application issues to reduce service desk demand and improve user experience.
• Define and monitor endpoint service health measures including provisioning success, patch and configuration compliance, application reliability, device health, security posture, and remediation effectiveness.
• Engineer the complete endpoint lifecycle from hardware standards and OEM integration through provisioning, configuration, operational management, refresh, secure wipe, and retirement.

• Provide Tier 3 engineering escalation and root cause analysis, including collaboration with IT peer groups in central and research IT, vendor management, knowledge creation, problem diagnosis, and resolution management.
• Support project initiatives through requirements gathering, prototyping, systems design, testing, validation, deployment planning, and operational transition.
• Develop, publish, and maintain system documentation including requirements, design and build documentation, test plans, operational procedures, troubleshooting guides, and standard operating procedures according to department standards.
• Review endpoint security alerts, vulnerabilities, configuration drift, and compliance issues and work with the Laboratory’s Cyber team to prioritize and implement remediation.
• Collaborate with Microsoft, hardware manufacturers, software vendors, and service providers to plan for and remediate operational issues affecting the endpoint platform.
• Partner with the Service Center and Workplace Experience teams to improve self-service, supportability, employee experience, and adoption of endpoint services.

• Modern Windows…