Job DescriptionThe Impact you will have in this role:The Senior Associate Lead Systems Engineer - Endpoint Management Observability Engineer will serve as a technical lead responsible for supporting and operating the observability model that executes accelerated enterprise patch management. The role focuses on measuring patch management success, monitoring endpoint health during rapid update cycles, identifying user-impacting conditions early, and improving the overall Digital Employee Experience (DEX). This position will correlate telemetry from endpoint management, monitoring, and experience platforms to provide actionable visibility into deployment progress, endpoint stability, remediation needs, and risk exposure during standard, accelerated, and critical patch events. The role partners closely with Endpoint Engineering, Security, Vulnerability Management, Application Packaging, VDI, Service Desk, Operations, and vendor teams to ensure patch execution is measurable, auditable, and aligned with enterprise risk and control expectations.
Your Primary Responsibilities: - Lead the design and continuous improvement of an Endpoint Management Observability capability supporting accelerated patch management across Windows endpoints, virtual desktops, and managed endpoint platforms.
- Define and report patch success measures, including deployment coverage, install success and failure rates, reboot compliance, device check-in health, remediation progress, and vulnerability exposure reduction.
- Monitor user impact throughout patch waves by analyzing endpoint performance, system stability, application health, reboot behavior, login experience, device responsiveness, and service desk signals.
- Correlate patch deployment rings, pilot groups, phased rollouts, and accelerated response timelines with telemetry to identify anomalies, failing device populations, and emerging DEX issues.
- Support 24-hour, 48-hour, and other accelerated patch response models by providing command-center visibility into deployment status, risk areas, user impact, and remediation actions.
- Partner with engineering teams to establish pre-deployment readiness checks, post-deployment validation, regression indicators, and operational go/no-go criteria for patch waves.
- Drive remediation coordination for failed patch installs, unhealthy devices, repeated reboot failures, performance degradation, application compatibility issues, and other endpoint conditions that may reduce patch completion or user experience.
- Translate observability insights into clear executive, operational, and audit-ready reporting that communicates patch progress, residual risk, user impact, and required actions.
- Work with Security and Vulnerability Management teams to align patch observability with vulnerability remediation priorities, risk exposure, and evidence requirements.
- Collaborate with Application Packaging, VDI, Service Desk, Operations, and vendor teams to resolve application or platform issues identified during patch cycles, including high CPU, memory, disk, or application failure patterns.
- Create, maintain, and improve documentation for observability controls, dashboards, alert thresholds, escalation workflows, remediation tracking, and evidence collection.
- Provide advanced technical support and guidance to desktop support and endpoint operations teams during patch deployment, monitoring, and remediation activities.
- Align risk and control processes into day-to-day responsibilities to monitor and mitigate risk; escalates appropriately.
- Improved visibility into patch deployment progress, endpoint health, remediation status, and user-impacting conditions during patch events.
- Higher patch completion and remediation effectiveness through telemetry-driven identification of failures, blockers, and unhealthy device populations.
Reduced risk exposure through faster detection, prioritization, and escalation of patch gaps aligned to accelerated response requirements.
Improved DEX during patch cycles by proactively identifying performance degradation, application instability, reboot friction, and service-impacting trends.
Consistent, audit-ready evidence that demonstrates patch management execution, monitoring controls, remediation actions, and risk-based decision-making.
Qualifications: - Minimum of 6 years of related experience
- Bachelor's degree preferred or equivalent experience
Talents Needed for Success: - 6+ years of experience in systems engineering, endpoint management, infrastructure operations, or digital workplace engineering, with demonstrated technical leadership responsibility.
- Hands-on experience supporting enterprise patch management at scale using SCCM/MECM, Microsoft Intune, co-management, Windows Update for Business, or comparable endpoint management platforms.
- Experience building or operating observability, monitoring, and reporting capabilities for endpoint health, patch compliance, application stability, and user experience.
- Strong understanding of vulnerability management, accelerated remediation practices, risk prioritization, and enterprise control expectations.
- Ability to analyze telemetry, identify trends, isolate device or application failure patterns, and convert findings into actionable remediation plans.
- Experience with PowerShell, automation, KQL/Log Analytics, Power BI, or related reporting and analytics technologies preferred.
- Familiarity with Digital Employee Experience frameworks and endpoint experience platforms such as SysTrack/Lakeside, ZDX, or comparable monitoring solutions.
- Experience with Azure, AVD, Windows 365, VDI, cloud-managed endpoints, or hybrid endpoint environments preferred.
- Strong written and verbal communication skills with the ability to prepare executive-ready, operational, and audit-ready reporting.
- ITIL alignment and experience working in regulated enterprise environments preferred.
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.
