Sr Desktop Engineer - Endpoint Management

**Digital Employee Experience (DEX)

• Own the DEX program, tracking employee-facing metrics such as boot/logon time, app responsiveness, and device health across Windows and macOS.
• Build proactive monitoring and remediation campaigns that detect experience issues before they become help desk tickets.
• Partner with Security and Service Management to convert DEX signals into prioritized remediation and user communication.
• Report DEX trends and outcomes to IT leadership, linking experience metrics to endpoint investments.
  **Intune - End-to-End Windows Device Lifecycle
  • Own the Windows device lifecycle in Intune, including Autopilot provisioning, configuration, security baselines, apps, patching, compliance, and retirement.
  • Lead phased co-management migration from SCCM to Intune, including workload transition decisions and roadmap toward cloud-native management.
  • Design Intune profiles, security baselines, BitLocker, firewall, Windows Update rings, and Conditional Access alignment with Identity and Security teams.
  • Own application packaging and deployment through Win32 apps, Store apps, and Company Portal self-service.
  • Build automation for policy deployment, drift detection, troubleshooting, and fleet reporting. **JAMF - End-to-End macOS Device Lifecycle
    • Own the macOS lifecycle in JAMF, including ADE enrollment, configuration, security baselines, apps, patching, compliance, and retirement.
    • Lead Apple enrollment strategy and Apple ID governance for the macOS fleet.
    • Maintain JAMF profiles and CIS-aligned security baselines such as FileVault and firewall with Security.
    • Own JAMF Self Service, Apps & Books, packaging, distribution, and license management.
    • Integrate JAMF workflows with vulnerability management and ITSM for unified patch governance.
      **AI-Assisted / Agentic Automation & Scripting
      • Identify desktop engineering processes suitable for AI-assisted workflows, agentic automation, and human-in-the-loop orchestration.
      • Design workflows that connect DEX, Intune, JAMF, vulnerability management, and ITSM signals to recommend or trigger approved remediation.
      • Use AI to accelerate troubleshooting, summarize fleet trends, detect drift, and generate governed scripts, runbooks, and remediation logic.
        • Build automation for endpoint policy deployment, drift detection, and reporting using PowerShell and REST APIs.
        • Support vulnerability remediation automation by connecting detection, endpoint actions, and SLA governance.
          **Technical Leadership & Collaboration

          • Serve as Level 3 escalation for complex endpoint management issues.

          • Mentor Desktop Engineering team members on Intune, JAMF, automation, and troubleshooting best practices.

          • Represent Desktop Engineering in planning with Security, Network, Identity, and Service Management teams. ","

            Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.**********