Windows Desktop Engineering Expert (L3)

Who we are

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center is the 2nd biggest IT setup (after the biggest setup in its Head office in Paris) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

• Envisioning and preparing the Bank’s futures information systems
• Partnering and supporting core banking flagships and transverse areas in their large scale development projects
• Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.

We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position Overview

The Windows Desktop Engineering Expert (L3) is responsible for driving the operational excellence, reliability, and continuous improvement of workstation and end‑user services across the Singapore ISAP office.

We are seeking an experienced Windows Desktop Engineering Expert (L3) to join our Enterprise Workplace Engineering team. The successful candidate will be responsible for designing, engineering, securing, and supporting large-scale Windows desktop environments within a highly regulated enterprise environment.

This role requires deep technical expertise in Windows 11 Engineering , Microsoft 365 technologies , Microsoft Endpoint Configuration Manager (MECM/SCCM) , endpoint security, modern workplace services, and advanced troubleshooting. The candidate will act as the highest level of technical escalation for desktop-related issues and will lead strategic initiatives involving workstation modernization, operating system lifecycle management, endpoint compliance, software deployment, and workplace transformation.

Key Responsibilities

Desktop Platform Engineering:

• Design, build, maintain, and continuously improve enterprise Windows desktop platforms.

• Lead Windows 10 to Windows 11 migration and modernization initiatives.

• Develop and maintain enterprise workstation standards, golden images, security baselines, and desktop engineering roadmaps.

• Engineer and support Microsoft SCCM/MECM co-management solutions.

• Validate and implement Windows feature updates, security updates, and servicing strategies.

• Assess emerging Microsoft technologies and recommend adoption strategies.

• In-depth troubleshooting of complex Incidents affecting Laptop/Workstations estate.

Microsoft Endpoint Management

• Administer and optimize MECM/SCCM infrastructure including:

• Software Distribution

• Operating System Deployment (OSD)

• Patch Management

• Compliance Configuration

• Endpoint Reporting

• Remote Tools

• Manage distribution points, management points, boundary groups, and content distribution.

• Automate deployment processes using PowerShell and MECM task sequences.

• Drive transition from traditional endpoint management to modern endpoint management capabilities.

Microsoft 365 Engineering

• Engineer and support Microsoft 365 services including:

• Microsoft 365 Apps for Enterprise

• Microsoft Teams

• OneDrive for Business

• Microsoft Outlook

• SharePoint Online

• Exchange Online (Basics Understanding).

• Microsoft Defender ecosystem

• Manage M365 Apps deployment channels and service strategies.

• Optimize endpoint integration with Microsoft cloud services.

Advanced Troubleshooting & Problem Management

• Function as L3 technical escalation for complex desktop and endpoint issues.

• Lead root cause analysis (RCA) for critical incidents and recurring problems.

• Resolve complex issues involving:

• Windows OS

• Group Policy

• AD Authentication

• Azure AD / Entra ID

• M365 Applications

• Endpoint Security (Defender)

• Network Connectivity

• VPN Solutions (F5)

• Citrix VDI

• Application Compatibility investigations & recommandations to developers

• Produce technical reports and improvement recommendations.

Security & Compliance

• Ensure endpoints comply with enterprise security standards.

• Collaborate with Cybersecurity teams on:

• Endpoint Protection

• EDR/XDR Solutions

• Vulnerability Management

• Security Hardening

• Device Compliance

• Support regulatory audits and compliance reviews.

• Implement Corporate & Microsoft Security Baselines, and Zero Trust principles.

Automation & Innovation

• Develop PowerShell automation solutions.

• Improve operational efficiency through scripting and orchestration.

• Create self-healing and proactive remediation solutions.

• Drive continuous service improvement initiatives.

Project & Vendor Management

• Lead workplace technology projects from design through implementation.

• Collaborate with global infrastructure teams, security teams, application owners, and external vendors.

• Prepare technical documentation, architecture diagrams, SOPs, and HLD/LLD documentation.

• Participate in change management and CAB processes.

Job specific environment and/or organization

• English Language (French – good to have).
• Flexibility in working hours & 2 Shift’s (8am-5pm/10am-8pm) Weekend/on-call (24/7 rotation) and/or emergencies during major incidents/projects.

Required Skills and Experience

Technical Expertise

• 8-15+ years' experience in Enterprise Desktop Engineering.

• Minimum 5 years of hands-on Windows 10/11 engineering experience.

• Expert-level knowledge of:

• Windows 11 Enterprise

• Microsoft 365

• MECM/SCCM/Intune

• Active Directory

• Group Policy

• Microsoft Entra ID (Azure AD)

• PowerShell Scripting

• Strong experience with:

• Operating System Deployment (OSD)

• Patch Management

• Application Packaging (Basics)

• Endpoint Security

• Device Compliance

• Modern Workplace Solutions (Laptop & Desktop Hardware & Trading solutions)

• Citrix Virtual Apps & Desktops (Basics)

• AppSense / Ivanti

• Nexthink

• ServiceNow

Troubleshooting Expertise

• Demonstrable experience troubleshooting:

• Blue Screen (BSOD) analysis

• Windows Performance Issues

• Authentication issues

• Outlook and Teams issues

• Office activation issues

• Application deployment failures

• SCCM client health issues

• GPO processing failures

• Endpoint compliance failures

• VPN and network connectivity issues

Qualifications/Education

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.

Mandatory Certifications

• Microsoft Certifications related to Desktops/M365/MECM/SCCM/Intune.

• Other IT certifications related to IT Security, Infrastructure Management, Networking is an advantage.