Endpoint Engineering Specialist

Permanent Full Time

The Engineering Specialist is a senior technical role responsible for designing, implementing, securing, and continuously improving the organization's end-user computing and digital workplace platforms. This role combines endpoint engineering, desktop engineering, virtual desktop infrastructure, automation, security, compliance, and service improvement responsibilities to deliver secure, scalable, and user-focused workplace technology services.

What You Will Do

• Design, develop, and maintain modern endpoint management capabilities across Windows, macOS, physical desktop, and virtual desktop environments.
• Administer and enhance platforms including Microsoft Intune, MECM, Entra ID, Microsoft Defender, Windows Autopatch, Microsoft 365 Apps, Jamf, and related management services.
• Develop automation using PowerShell, Microsoft Graph, REST APIs, Azure tooling, and other approved technologies to improve provisioning, software deployment, compliance, reporting, and operational efficiency.
• Evaluate emerging endpoint, AI-enabled, and digital workplace technologies to improve service delivery, employee experience, resiliency, and supportability.

Azure Virtual Desktop & Cloud Desktop Services

• Design, deploy, and manage Azure Virtual Desktop environments including host pools, session hosts, application groups, images, scaling plans, and user access models.
• Implement and troubleshoot FSLogix profile containerization, user profile issues, session host performance, and service reliability concerns.
• Integrate AVD/AVDI with Microsoft Entra ID, Conditional Access, MFA, network controls, and enterprise security requirements.
• Optimize virtual desktop performance and health through Azure Monitor, Log Analytics, endpoint analytics, DEX insights, and operational reporting.
• Support infrastructure-as-code and repeatable deployment practices using Terraform or other approved automation frameworks.

Patching, Security, Compliance & Risk

• Develop, maintain, and continuously improve endpoint patching, vulnerability management, configuration baseline, compliance, and endpoint hardening processes.
• Design and implement endpoint security controls, compliance policies, application control capabilities, software governance practices, and audit-supporting controls.
• Monitor, assess, and remediate security, compliance, vulnerability, and audit findings through automation, reporting, risk assessment, and collaboration with Security and Infrastructure teams.
• Support governance, change management, technical review, operational readiness, and positive risk-culture expectations across engineering deliverables.

Network, Access & Platform Reliability

• Troubleshoot endpoint and AVD-related connectivity issues, including routing, firewall, segmentation, policy, and access control challenges.
• Collaborate with Network, Cloud, Security, IAM, and Infrastructure teams to analyze traffic flows, resolve firewall rule conflicts, and ensure secure access to workplace services.
• Identify root causes of recurring environmental issues and recommend proactive engineering improvements that reduce downtime, support incidents, and operational risk.

End User Experience, Tier 3 Support & Service Improvement

• Provide Tier 3 support for complex endpoint, software, security, desktop, and virtual desktop incidents and escalations.
• Partner with Service Desk, Field Services, End User Operations, Security, Cloud, and partner teams to drive timely resolution and knowledge transfer.
• Use endpoint health, performance, DEX, and incident trends to identify opportunities for proactive remediation and measurable service improvement.
• Develop support guidance, technical training, change enablement material, and adoption support for new technologies and workplace services.

Project Delivery, Lifecycle & Roadmap Contribution

• Lead and participate in endpoint, desktop, AVDI, modernization, lifecycle, migration, and compliance-related projects.
• Contribute to technology roadmaps, lifecycle planning, platform modernization, Windows servicing, device lifecycle, and continuous improvement initiatives.
• Work within Agile delivery practices including sprint planning, backlog refinement, daily standups, retrospectives, release planning, and prioritization using Jira, ServiceNow, Azure DevOps, or other approved tools.
• Provide technical leadership to ensure solutions are secure, supportable, operationally ready, and aligned with business, architectural, compliance, and service‑management standards.

Governance, Documentation & Knowledge Management

• Develop and maintain engineering standards, technical documentation, architec