Senior Desktop Engineer

About the Role
We’re hiring a Senior Desktop Engineer to support a New York State government agency in Lower Manhattan. You will design, build, deploy, and support the agency’s desktop environment. The work covers Windows 11 imaging and packaging, MDM, Active Directory and Group Policy, endpoint security hardening, and advanced troubleshooting of VPN, VDI, 2FA, and network printing. This is a hands-on senior role. You’ll manage a ticket queue, balance urgent field issues against planned project work, and follow strict cybersecurity and compliance practices.

Responsibilities

• Design, build, test, and debug desktop engineering solutions across the enterprise
• Create, deploy, and maintain Windows 11 (64-bit) images, and build and manage software packages
• Administer mobile device management (MDM) for agency devices
• Manage Active Directory objects and enforce Group Policy standards
• Troubleshoot network-related endpoint issues involving DHCP, VLANs, ACLs, and firewalls
• Provide advanced support for VPN, VDI, two-factor authentication, and network printing
• Implement and maintain client-side security tools, including antivirus, PKI, hard drive encryption, and general endpoint hardening
• Write and maintain automation scripts in PowerShell and VBScript
• Diagnose and resolve hardware and software issues on Intel-based workstations
• Manage assigned tickets and queues: categorize them correctly, document resolutions on time, and prioritize by impact and urgency
• Follow cybersecurity best practices and compliance requirements, including:
  • isolating suspected infected machines from the internal network
  • verifying AUP training before provisioning access on personal devices
  • guiding users on reporting and handling suspicious emails
• Research, analyze, plan, and implement engineering improvements to the desktop environment

Required Qualifications (7+ years / 84 months in each)

• Desktop engineering, including design, build, testing, and debugging
• Mobile device management (MDM) solutions
• Active Directory management and Group Policy standards
• Networking concepts (DHCP, VLANs, ACLs, firewalls)
• Windows 11, including 64-bit operating systems
• Scripting, with PowerShell and VBScript preferred
• Client-based security tools (antivirus, PKI, HDD encryption, security hardening)
• Windows image deployment and package creation/management
• Advanced troubleshooting of VPN, VDI, 2FA, and network printing
• Cybersecurity best practices and compliance
• Intel workstation hardware and operating systems
• Analyzing and solving hardware and software problems
• Engineering research, analysis, planning, and implementation
• Ticket and queue management, with the ability to handle several tasks and shifting priorities

Preferred Certifications

• Microsoft Windows certifications (e.g., Microsoft 365 Endpoint Administrator Associate, MD-102, or equivalent)

In-person interview in NYC is required, with no exceptions