VP, Desktop Engineering Leader; L12

Role Summary / Purpose

We are seeking a Desktop Engineering Leader to own and modernize Synchrony’s global endpoint ecosystem across physical and virtual platforms. This leader will partner closely with Risk & Compliance to support audits, ensure configuration compliance, and remediate vulnerabilities, while collaborating with Desktop Operations/ECC teams to enable scalable, reliable day‑to‑day delivery and support.

• Endpoint Engineering & Platform Lifecycle – Lead engineering design, development, standardization, and lifecycle management for Windows, macOS, and ChromeOS endpoints; engineer and maintain enterprise OS images (Windows/macOS) and govern ChromeOS management and update strategy; define and maintain hardware standards, perform OEM model testing, and manage driver/BIOS/firmware update processes; develop and optimize configuration baselines, performance settings, and endpoint hardening standards across platforms.
• Modern Endpoint Management (Intune / Autopilot / SCCM Co‑Management) – Design and manage Intune policies for configuration, application deployment, compliance, and security baselines; lead Windows Autopilot workflows including device registration, profile assignment, join models (Hybrid/Azure AD), validation, and reset/reprovisioning processes; support SCCM infrastructure for co‑management scenarios, packaging, patching, and deployment pipelines; drive strategy/roadmap across endpoint tooling including Intune, SCCM, Ivanti, Tanium, JAMF, and Google Admin Console.
• VDI / DaaS Engineering – Optimize performance, patching, and application compatibility for VDI/DaaS platforms (e.g., Citrix Cloud, AWS Work Spaces, App Stream, Cloud PC); support specialized VDI requirements (M365 products & services on Citrix).
• Security, Risk, Compliance, and Audit Support – Act as the Desktop Engineering POC for audit readiness, evidence collection, technical controls validation, and remediation tracking; implement and maintain endpoint security controls (e.g., Defender, ASR rules, Bit Locker) and align configurations with regulatory expectations (e.g., SOX/PCI); manage macOS EFI/firmware/device password standards and coordinate JAMF integrations where required.
• Operational Excellence & Experience Analytics – Improve endpoint performance and user experience through Nexthink/telemetry insights and targeted remediation; partner with Desktop Operations/ECC teams to transition engineered solutions into scalable production deployment and support; lead root cause analysis for systemic endpoint issues and drive durable corrective actions; evaluate new tools and modernization opportunities (e.g., Autopilot/Intune enhancements, Nexthink, Tanium, updated security baselines).

• 10+ years in Desktop Engineering, Modern Endpoint Management, or OS Platform Engineering or 12+ years of experience in lieu of a degree.
• Deep expertise in Windows 10/11 engineering (imaging, driver management, BIOS/firmware, GPO/Intune policy design).
• Strong experience with Intune, Autopilot, compliance policies, conditional access, and Azure AD join models / co‑management architecture.
• Proficiency in macOS engineering, including update governance, security controls, hardware baseline validation, and JAMF integration.
• Experience with ChromeOS management (automated enrollment, OU‑based policy management, update governance).
• Familiarity with endpoint security tooling and controls (e.g., Defender, ASR, Bit Locker).
• Knowledge of audit/control expectations as applied to endpoints (e.g., SOX, PCI, configuration compliance).
• Strong cross‑functional collaboration (Operations, Security, Risk, Cloud, Network).
• Excellent documentation and communication skills; ability to lead RCA and corrective action programs.
• Broad hands‑on/architectural experience across Windows, macOS, ChromeOS, SCCM, Intune, JAMF, Citrix/VDI.

• Experience leading Cloud PC / DaaS programs and VDI modernization/migration initiatives.
• Track record delivering large‑scale endpoint lifecycle modernization (e.g., Autopilot adoption, OS lifecycle planning).
• Cloud identity and access experience (Azure AD, Conditional Access, integrations).
• Automation and scripting expertise (Power Shell, Python).

3 PM to 12 AM IST. This role qualifies for Enhanced Flexibility offered in Synchrony India and will require the incumbent to be available between 06:00 AM Eastern Time and 11:30 AM Eastern Time. The remaining hours will be flexible. Occasionally, you may be required to commute or travel to Hyderabad or one of the Regional Engagement Hubs for in‑person engagement activities such as meetings, trainings, and culture events.

We are proud to offer flexibility. You may work from home or from our Regional Engagement Hubs—Hyderabad, Bengaluru, Pune, Kolkata, or Delhi/NCR.