Role Summary

The Lead Desktop Engineer - End User Compute (EUC) serves as a senior technical leader responsible for the engineering, administration, operational health, security, and continuous improvement of the enterprise endpoint environment. 

This role functions as a recognized subject matter expert across end-user computing technologies and is responsible for driving platform modernization, implementing new solutions, establishing technical standards, and ensuring the reliability and security of the organization's endpoint ecosystem. 

The Lead Desktop Engineer provides technical leadership across desktop engineering initiatives, mentors junior team members, and leads the design and implementation of endpoint technologies that support business productivity, security, and operational excellence. 

This position requires extensive experience managing large-scale enterprise endpoint environments and the ability to independently lead complex technical initiatives from concept through production deployment and operational support. 

Responsibilities 

End User Compute Platform Leadership: 

• Serve as a senior technical leader for enterprise endpoint platforms and workplace technologies. 
• Lead technical design, implementation, and administration of end-user computing solutions. 
• Establish and maintain engineering standards, operational procedures, and platform best practices. 
• Act as a primary escalation point for complex endpoint and platform issues. 
• Provide technical guidance and mentorship to Desktop Engineers and Senior Desktop Engineers. 

Endpoint Engineering & Administration:

• Engineer, administer, and maintain enterprise endpoint management platforms. 
• Ensure operational health, stability, and performance across the endpoint fleet. 
• Develop device configuration standards and security baselines. 
• Manage operating system lifecycle activities including deployments, upgrades, and patch management. 
• Support Windows, macOS, virtual desktop, and cloud-based endpoint platforms as required. 

Modern Workplace Solutions: 

• Lead the implementation of new technologies that improve user experience, security, automation, and operational efficiency. 
• Evaluate emerging technologies and provide technical recommendations. 
• Design and implement modern endpoint management capabilities, including Modern Device Management (MDM), zero-touch provisioning, endpoint security controls, virtual desktop technologies, Cloud PC solutions, and Digital Employee Experience platforms. 
• Develop technical designs, implementation plans, testing strategies, and deployment methodologies. 

Security & Compliance:

• Partner with Information Security teams to strengthen endpoint security posture. 
• Implement and maintain endpoint security controls and compliance requirements, including appropriate use of Microsoft Defender Antivirus and Windows Defender Application Control (WDAC). 
• Support vulnerability management, remediation, and risk-reduction initiatives. 
• Assist with incident response activities involving endpoint technologies. 
• Ensure endpoint platforms align with corporate security policies and regulatory requirements. 

Automation & Process Improvement:

• Develop automation solutions to improve operational efficiency and platform scalability. 
• Leverage scripting and automation technologies to reduce manual effort. 
• Continuously identify opportunities for operational improvement. 
• Create and maintain technical documentation, procedures, and knowledge articles. 

Project Leadership: 

• Lead endpoint-focused projects and engineering initiatives. 
• Coordinate technical activities across infrastructure, security, network, and support teams. 
• Manage technical deliverables, implementation schedules, and platform readiness activities. 
• Ensure successful transition of new solutions into ongoing operations. 

Qualifications

Required:

• 7+ years of experience supporting and engineering enterprise endpoint environments. 
• 5+ years of experience administering large-scale enterprise desktop management platforms. 
• Advanced experience supporting Windows endpoint environments. 
• Experience with modern endpoint management technologies such as Microsoft Intune, Microsoft Configuration Manager (MECM/SCCM), Microsoft Entra ID, and Jamf Pro. 
• Familiarity with endpoint security capabilities such as Microsoft Defender Antivirus and Windows Defender Application Control (WDAC). 
• Strong experience with PowerShell and automation. 
• Experience implementing endpoint security technologies and controls. 
• Experience leading enterprise technology deployments and platform modernization efforts. 
• Strong troubleshooting, problem-solving, and root-cause analysis skills. 
• Excellent communication and technical leadership abilities. 

Qualifications

Preferred:

• Experience supporting environments with 5,000+ endpoints. 
• Experience with Windows 365, Azure Virtual Desktop, Citrix 
• Experience with Microsoft Defender Antivirus, Windows Defender Application Control (WDAC), CrowdStrike, Tanium, Nexthink, or similar enterprise management and security solutions. 
• Experience with endpoint vulnerability management programs. 
• Experience in financial services or other highly regulated environments. 
• Relevant Microsoft, VMware, Citrix, Jamf, or security certifications. 

Leadership Expectations

• Be recognized as a technical subject matter expert within End User Compute. 
• Lead through technical expertise and influence. 
• Independently drive complex engineering initiatives. 
• Mentor and develop junior team members. 
• Make sound technical decisions balancing user experience, reliability, security, and operational efficiency. 
• Promote automation, standardization, and continuous improvement. 
• Collaborate effectively across technology teams and business stakeholders. 

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.

Base Salary Ranges

Please review the job posting for the location of this specific opportunity.

Placement within the range provided above is based on the individual’s relevant experience and skills for the role.  Base salary is only one component of our total compensation package.  Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.

Benefits