Lead Desktop Engineer

Job description

automation.ResponsibilitiesResponsibilitiesAdminister endpoint management platforms including Microsoft Intune and related configuration management tools to enforce patch compliance, device encryption, application deployment standards, and endpoint security configurations consistent with industry cybersecurity control frameworksOversee enterprise patch management cycles for endpoints, ensuring timely vulnerability remediation, documentation within ITSM change workflows, and validation of successful deployment prior to closureCoordinate with Identity, Credential, and Access Management (ICAM) leadership to ensure workstation authentication controls, MFA enforcement, certificate deployment, and conditional access configurations are functioning properly within Microsoft Entra ID and Microsoft 365 integrationsValidate endpoint log forwarding and monitoring integration with enterprise monitoring platforms to ensure visibility into device health, configuration compliance, and potential security anomaliesProduce and maintain workstation engineering documentation including gold image standards, configuration baselines, lifecycle refresh schedules, and compliance dashboardsSupport root cause analysis for enterprise-wide endpoint incidents, configuration conflicts, or patch deployment failures and implement corrective actions to prevent recurrenceParticipate in Change Advisory Board (CAB) reviews to assess risk and approve major workstation environment changes prior to deploymentQualificationsMinimum Qualifications:Bachelor's degree in Computer Science, Computer Engineering, or equivalent experience.7-9 years of IT support experience, with at least 1–2 years in a supervisory role.Complies with all policies and standards.Maintain