Senior Desktop Engineer

Project overview

About the Role

We’re hiring a Senior Desktop Engineer to support a New York State government agency in Lower Manhattan. You will design, build, deploy, and support the agency’s desktop environment. The work covers Windows 11 imaging and packaging, MDM, Active Directory and Group Policy, endpoint security hardening, and advanced troubleshooting of VPN, VDI, 2FA, and network printing. This is a hands-on senior role. You’ll manage a ticket queue, balance urgent field issues against planned project work, and follow strict cybersecurity and compliance practices.

Responsibilities

Required Qualifications (7+ years / 84 months in each)

Preferred Certifications

• Design, build, test, and debug desktop engineering solutions across the enterprise
• Create, deploy, and maintain Windows 11 (64-bit) images, and build and manage software packages
• Administer mobile device management (MDM) for agency devices
• Manage Active Directory objects and enforce Group Policy standards
• Troubleshoot network-related endpoint issues involving DHCP, VLANs, ACLs, and firewalls
• Provide advanced support for VPN, VDI, two-factor authentication, and network printing
• Implement and maintain client-side security tools, including antivirus, PKI, hard drive encryption, and general endpoint hardening
• Write and maintain automation scripts in PowerShell and VBScript
• Diagnose and resolve hardware and software issues on Intel-based workstations
• Manage assigned tickets and queues: categorize them correctly, document resolutions on time, and prioritize by impact and urgency
• Follow cybersecurity best practices and compliance requirements, including:
• isolating suspected infected machines from the internal network
• verifying AUP training before provisioning access on personal devices
• guiding users on reporting and handling suspicious emails
• Research, analyze, plan, and implement engineering improvements to the desktop environment
• Desktop engineering, including design, build, testing, and debugging
• Mobile device management (MDM) solutions
• Active Directory management and Group Policy standards
• Networking concepts (DHCP, VLANs, ACLs, firewalls)
• Windows 11, including 64-bit operating systems
• Scripting, with PowerShell and VBScript preferred
• Client-based security tools (antivirus, PKI, HDD encryption, security hardening)
• Windows image deployment and package creation/management
• Advanced troubleshooting of VPN, VDI, 2FA, and network printing
• Cybersecurity best practices and compliance
• Intel workstation hardware and operating systems
• Analyzing and solving hardware and software problems
• Engineering research, analysis, planning, and implementation
• Ticket and queue management, with the ability to handle several tasks and shifting priorities
• Microsoft Windows certifications (e.g., Microsoft 365 Endpoint Administrator Associate, MD-102, or equivalent)

Project details

In-person interview in NYC is required, with no exceptions

Job Facts: Contract W2 | Contract Independent | 30 Months | No Travel Required | On-site | $50 - $53/hr

Skills: Desktop Engineering, Windows 11, Windows Imaging, Software Packaging, Image Deployment, MDM, Mobile Device Management, Microsoft Intune, Active Directory, Group Policy, GPO, PowerShell, VBScript, Scripting, DHCP, VLANs, ACLs, Firewalls, Networking, VPN, VDI, Two-Factor Authentication, 2FA, MFA, Network Printing, Endpoint Security, Antivirus, PKI, Disk Encryption, BitLocker, Security Hardening, Cybersecurity Compliance, Intel Workstations, Hardware Troubleshooting, Software Troubleshooting, Ticketing Systems, ITSM, Desktop Support, Microsoft Certifications

Reference: Dice Id: PTPxgaU4NT5uUKO | Position Id: 9117073

• W-2: $40–$43/hr (includes PTO and benefits)
• C2C/1099: $50–$53/hr
• Start: flexible
• Duration: 30 Months
• Remote: onsite
• Location: New York, NY, US, US