Job SummaryThe Application Engineer role will design, deploy, and manage desktop client configurations and application lifecycles across a primarily Windows-based enterprise environment. This role focuses on modern endpoint management using Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM), with limited support for macOS endpoints. Requires experience delivering secure, reliable, and scalable client solutions.
The Application Engineer reports to the IT Service Operations Manager.
Essential Functions - Design, deploy, and maintain desktop client configurations using Microsoft Intune and MECM for Windows endpoints (approximately 95% of client population).
- Manage application packaging, testing, deployment, updates, and retirement for Windows desktop applications.
- Develop and maintain device compliance, configuration profiles, security baselines, and application deployment strategies.
- Support and manage a small macOS footprint (approximately 5%) using Intune, Moysle, or similar MDM tools.
- Troubleshoot deployment, configuration, and performance issues across Windows and macOS endpoints.
- Create and maintain automation and scripts (PowerShell preferred) to improve reliability, efficiency, and standardization.
- Partner with security, infrastructure, and service desk teams to ensure endpoint configurations meet organizational security and compliance requirements.
- Participate in OS lifecycle management, including Windows feature updates, patching, and image optimization.
- Document standards, processes, configurations, and troubleshooting procedures.
- Evaluate and implement new endpoint management features and best practices within the Microsoft ecosystem.
Other - Adheres to all company policies, procedures, and business ethics codes.
- Completes required regulatory training as assigned.
- Maintains strict adherence to and compliance with all laws, rules, regulations, and internal controls specific to the role, including but not limited to Bank Secrecy Act, Anti-Money Laundering, USA Patriot Act, OFAC and Fair Lending regulations.
Knowledge/Skills/Abilities Knowledge
- Knowledge of Desktop Engineering best practices and implementation in both Microsoft MECM and InTune.
- Experience prioritizing tasks based on criticality and impact
Skills
- Ability to build deployment packages for security and feature updates for both native and third-party software.
- Ability to build and maintain automation scripts using Powershell or similar technologies.
Abilities
- Ability to work with other technology teams to support their needs including but not limited to application teams and IT Security.
- Ability to collaborate with IT Leadership to better understand and deliver upon their needs.
- Ability to be hands on and detail oriented.
Core Competencies - Demonstrating Member Obsession
- Puts themselves in the Member's shoes
- Looks for friction points
- Makes it personalized and easy
- Demonstrating Performance Excellence
- Sets standards for elevating excellence
- Conducts continuous improvement
- Challenges current thinking
- Approaches change with a positive mindset
Experience Minimum Requirements - 3+ years of experience in desktop client engineering or end-user computing roles
- Strong hands-on experience with Microsoft Intune and MECM (Current Branch).
- Advanced knowledge of Windows 10/11 configuration, deployment, and troubleshooting.
- Experience with application packaging technologies (e.g., MSI, MSIX, Win32 apps).
- Strong scripting skills, particularly PowerShell.
- Familiarity with Azure AD / Entra ID, Conditional Access, and modern device management concepts.
- Experience supporting macOS endpoints in an enterprise environment.
- Understanding of endpoint security principles and integration with Microsoft Defender or similar tools.
- Bachelor's degree in computer science or computer information systems or equivalent experience
- Excellent documentation, communication, and collaboration skills.
- High School Diploma or Equivalent
Preferred Requirements - Hands-on experience managing macOS with Intune, Moysle, or similar tools.
- Experience with Autopilot, Windows Update for Business, and cloud-first endpoint strategies.
- Knowledge of third-party patching tools and enterprise application deployment workflows.
- Microsoft certifications related to endpoint management (e.g., MD-102, MS-102, or equivalent).
- Experience in large-scale enterprise or hybrid environments.
Physical Demands The physical demands described are representative of those that must be met by an employee, with or without accommodation, to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
- While performing the duties of this job, the employee is regularly required to sit; use hands to finger, handle or feel; reach with hands and arms; and talk or hear.
- Specific vision abilities required by this job include close vision, distance vision, peripheral vision, and ability to adjust focus.
- Employee will make extensive use of the telephone and virtual communications requiring the ability to explain complex information effectively and accurately.
Work Environment The work environment characteristics described are representative of those an employee encounters while performing the essential functions of this job.
- This position requires frequently working onsite at UFCU Plaza in Austin, Texas.
- This position may involve periodic stressful conditions.
- May occasionally require an adjusted work schedule, overtime, and evening/weekend hours.
- May occasionally move from one work location/branch to another.
- Public contact position, requiring appropriate professional appearance.
- Frequent computer use at a workstation of up to two hours at a time.
- The noise level in the work environment is usually moderate.
- Enterprise client environment with approximately 95% Windows and 5% macOS endpoints.
- Hybrid on-premises and cloud-based infrastructure.
- Collaboration with infrastructure, security, and operations teams.
