Day-to-Day:In this role, you will support and enhance the desktop engineering environment across a broad user base, with a focus on modernizing endpoint management. You will work across on-premises and cloud-connected systems to improve standardization, strengthen compliance, and stabilize endpoint configurations. Responsibilities include managing Windows operating systems, administering policies, converting GPOs to Intune, and improving the organization’s Intune implementation for compliance and endpoint security. You will also handle patching and vulnerability remediation, leveraging tools such as Intune, Tanium, or ManageEngine where applicable. PowerShell scripting will be used regularly to automate processes, streamline deployments, and enhance operational efficiency. As part of the team, you’ll collaborate closely with internal engineers, assist users across desktops, laptops, and a VDI environment, and ensure smooth, secure, and consistent device performance across the organization. Compensation: $100,000-$120,000/year. Exact compensation may vary based on several factors, including skills, experience, and education.Must-haves:5+ years of professional experience as a Desktop EngineerExperience supporting a large user base (approx. 780 users) across desktops, laptops, Windows devices, and VDI environments (endpoint-focused)Familiarity with Intune (existing instance is underutilized; needs improvement in compliance and endpoint management)Strong PowerShell scripting skillsExperience with Windows operating systems, including policy administration and converting Group Policy Objects (GPO) to IntuneActive or recent Public Trust Security Clearance (within the last 12 months) strongly preferred Plusses:Experience with Tanium or ManageEngine for patch management