Lead Desktop Engineer – End User Compute (EUC)

Lead Desktop Engineer
- End User Compute (EUC)

The Lead Desktop Engineer
- End User Compute (EUC) serves as a senior technical leader responsible for the engineering, administration, operational health, security, and continuous improvement of the enterprise endpoint environment.

This role functions as a recognized subject matter expert across end-user computing technologies and is responsible for driving platform modernization, implementing new solutions, establishing technical standards, and ensuring the reliability and security of the organization's endpoint ecosystem.

The Lead Desktop Engineer provides technical leadership across desktop engineering initiatives, mentors junior team members, and leads the design and implementation of endpoint technologies that support business productivity, security, and operational excellence.

This position requires extensive experience managing large-scale enterprise endpoint environments and the ability to independently lead complex technical initiatives from concept through production deployment and operational support.

• Serve as a senior technical leader for enterprise endpoint platforms and workplace technologies.
• Lead technical design, implementation, and administration of end-user computing solutions.
• Establish and maintain engineering standards, operational procedures, and platform best practices.
• Act as a primary escalation point for complex endpoint and platform issues.
• Provide technical guidance and mentorship to Desktop Engineers and Senior Desktop Engineers.

• Engineer, administer, and maintain enterprise endpoint management platforms.
• Ensure operational health, stability, and performance across the endpoint fleet.
• Develop device configuration standards and security baselines.
• Manage operating system lifecycle activities including deployments, upgrades, and patch management.
• Support Windows, macOS, virtual desktop, and cloud-based endpoint platforms as required.

• Lead the implementation of new technologies that improve user experience, security, automation, and operational efficiency.
• Evaluate emerging technologies and provide technical recommendations.
• Design and implement modern endpoint management capabilities, including Modern Device Management (MDM), zero-touch provisioning, endpoint security controls, virtual desktop technologies, Cloud PC solutions, and Digital Employee Experience platforms.
• Develop technical designs, implementation plans, testing strategies, and deployment methodologies.

• Partner with Information Security teams to strengthen endpoint security posture.
• Implement and maintain endpoint security controls and compliance requirements, including appropriate use of Microsoft Defender Antivirus and Windows Defender Application Control (WDAC).
• Support vulnerability management, remediation, and risk-reduction initiatives.
• Assist with incident response activities involving endpoint technologies.
• Ensure endpoint platforms align with corporate security policies and regulatory requirements.

• Develop automation solutions to improve operational efficiency and platform scalability.
• Leverage scripting and automation technologies to reduce manual effort.
• Continuously identify opportunities for operational improvement.
• Create and maintain technical documentation, procedures, and knowledge articles.

• Lead endpoint-focused projects and engineering initiatives.
• Coordinate technical activities across infrastructure, security, network, and support teams.
• Manage technical deliverables, implementation schedules, and platform readiness activities.
• Ensure successful transition of new solutions into ongoing operations.

Required:

• 7+ years of experience supporting and engineering enterprise endpoint environments.
• 5+ years of experience administering large-scale enterprise desktop management platforms.
• Advanced experience supporting Windows endpoint environments.
• Experience with modern endpoint management technologies such as Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Microsoft Entra , and Jamf Pro.
• Familiarity with endpoint security capabilities such as Microsoft Defender Antivirus and Windows Defender Application Control (WDAC).
• Strong…