Staff Engineer 2 (Endpoint Engineering)

As an IT Staff Engineer 2 within Endpoint Engineering, you will serve as a senior engineer focused on Azure Virtual Desktop, endpoint management, and modern end-user computing platforms. This role is responsible for engineering, supporting, and optimizing secure, reliable endpoint and virtual desktop solutions using AVD, Nerdio, Intune, MECM, Active Directory, Entra ID, Group Policy, and related technologies. This position provides advanced hands-on support for AVD operations, including host pools, session hosts, image management, FSLogix profiles, storage, performance, user experience, automation, and cost optimization. The role independently leads complex engineering work, mentors other engineers, supports audit and compliance requirements, and partners with cross-functional teams while escalating enterprise architecture decisions to Principal Engineers or leadership as appropriate., * Lead complex Endpoint Engineering and AVD initiatives with minimal supervision from design through deployment and operational support.

• Engineer, administer, troubleshoot, and optimize Azure Virtual Desktop environments, including host pools, session hosts, golden images, FSLogix, storage, performance, and user experience.

• Use Nerdio, Intune, MECM, Azure, Active Directory, Entra ID, and Group Policy to manage endpoint and virtual desktop platforms.

• Improve reliability, security, automation, monitoring, recovery procedures, and operational standards for AVD and endpoint services.

• Support endpoint modernization efforts including Intune, Autopilot, Windows lifecycle management, compliance baselines, application deployment, and cloud-managed endpoint capabilities.

• Provide advanced support for MECM/SCCM packaging, software deployment, patching coordination, endpoint configuration, and troubleshooting.

• Partner with security, infrastructure, desktop support, vendors, and business stakeholders to resolve complex endpoint, VDI, identity, and application delivery issues.

• Develop and maintain technical documentation, standards, runbooks, diagrams, scripts, and repeatable operational procedures.

• Evaluate solution designs, integrations, automation options, risks, costs, and long-term supportability.

• Mentor engineers and support teams by sharing technical knowledge and promoting consistent engineering practices.

• Provide Tier 3/Tier 4 escalation support for complex endpoint, AVD, application, identity, and user experience issues.

• Support risk management, regulatory compliance, change management, and protection of systems and data.

• Complete work in a timely and accurate manner while providing clear communication and strong customer service.

• The above job description is a summary of the job responsibilities and is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow instructions and perform tasks and other duties as assigned by their manager.

Commitment:

• Willingness to be an integral member of a successful team.

• Dedication to providing the highest levels of service.

• Excellent attendance and reliability.

• Adherence to company policies and procedures.

• Dedicated to maintaining confidentiality in every aspect of the job.

• 7+ years of related experience in Endpoint Engineering, End User Computing, Infrastructure Engineering, Cloud Engineering, IT App Support, IT Development, IT Networking, or a similar technical field.

• Bachelor’s degree in related field required or equivalent experience.

• Advanced hands-on experience with Microsoft Azure Virtual Desktop, including host pools, session hosts, image management, FSLogix, storage, monitoring, troubleshooting, and operational support.

• Advanced experience with Nerdio, Intune, MECM/SCCM, Azure, Windows endpoint configuration, application deployment, patching, compliance baselines, and endpoint lifecycle management.

• Advanced working knowledge of Active Directory, Entra ID/Azure AD, Group Policy, identity integration, access management, and related troubleshooting.

• Advanced experience with PowerShell scripting, automation, configuration management, endpoint remediation, and repeatable support workflows.

• Experience supporting secure and compliant endpoint environments, including IT controls, audit support, change management, security baselines, and regulated technology environments.

• Proven experience leading cross-functional technical workstreams and managing multiple complex initiatives.

• Advanced communication, troubleshooting, documentation, and stakeholder management skills.

• Ability to work collaboratively while providing technical leadership on complex Endpoint Engineering and AVD initiatives.

• Financial Services or Banking experience preferred.

• May require up to 25% travel. * Experience with AVD cost optimization, autoscaling, capacity planning, storage migrations, and user-impact planning.

• Experience with Windows 11 lifecycle management, Autopilot, Intune compliance policies, and cloud-managed endpoint capabilities.

• Experience with IGEL/UMS, thin-client management, contractor endpoint access, and hardened endpoint configurations.

• Experience with TeamViewer, endpoint analytics, digital employee experience tools, or proactive remediation capabilities.

• Certifications such as AZ-900, Azure Administrator, Intune, MECM, PowerShell, or equivalent hands-on experience preferred.

• Additional related education and/or experience preferred.