> Markdown version of [/jobs/ext/3039223-senior-lead-workstation-and-systems-engineering](https://www.wearedevelopers.com/jobs/ext/3039223-senior-lead-workstation-and-systems-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Lead Workstation and Systems Engineering - **Company:** Innovative Computer Solutions Group, Inc - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $124,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, Application Packaging, Systems Engineering, Audio Video Distribution, Microsoft Azure, BIOS, Cloud Computing, Cloud Computing Security, Configuration Management, CompTIA Security+, Identity and Access Management, Network Security, Microsoft Servers, System Center Configuration Manager, Virtual Desktops, Windows PowerShell, Proprietary Software, Regression Testing, Systems Integration, Microsoft Deployment Toolkit, Cloud Platform System, Delivery Pipeline, Microsoft InTune, Information Technology, Deployment Automation, Patch Management, 3-tier Architectures, CIS Benchmarks, Serverless Computing, Server Operating Systems & Platforms, Windows Client - **Published:** September 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=da66eb64aea3eb90 ## About the Role * Education & Experience: Bachelor's degree in IT, Computer Science, or related engineering discipline (or equivalent experience) plus 8+ years of progressive systems engineering experience, with at least 3+ years leading enterprise desktop/workstation operations in a federal or regulated environment. * Core Tooling: Expert-level mastery of MECM / SCCM and MDT (Microsoft Deployment Toolkit) for zero-touch OS imaging, task sequences, driver injection, and software packaging. * Virtualization & Cloud: Demonstrated experience deploying, scaling, and managing Azure Virtual Desktop (AVD) and integrating cloud-native services (Microsoft 365, Azure Intune). * Scripting & Automation: Advanced PowerShell proficiency for configuration scripts, task sequences, GPO automation, and silent package distribution. * Federal Baselines: Direct hands-on experience applying and auditing DISA STIGs, CIS benchmarks, and NIST 800-53 controls to Windows client/server operating systems., * Experience leading toolset consolidation efforts (e.g., migrating legacy MECM/MDT pipelines to modern unified cloud management like Microsoft Intune). * Working knowledge of ITIL v3/v4 frameworks (Change, Release, and Incident Management). * Familiarity with Apple macOS enterprise management (Intune). * Certifications: o Microsoft Certified: Endpoint Administrator Associate (MD-102) o Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) o CompTIA Security+ CE or CISSP ## Description The Senior Lead, Workstation & Systems Engineering serves as the principal technical authority and task lead responsible for the design, testing, lifecycle maintenance, security, and deployment of enterprise workstation images and patch management across NRC physical, virtual, and cloud environments (including Azure Virtual Desktop). This role directs image engineering via MECM and MDT, leads the transition toward a unified configuration management toolset, oversees the Enterprise Development and Testing Environment, and ensures strict compliance with federal baselines (DISA STIGs, NIST, FISMA, FDCCI). The Lead also acts as the top-tier escalation authority for Tier 3 troubleshooting and root cause analysis., * Master Image Architecture & Management: o Engineer, test, and maintain the hardware-independent Gold/Base Image and full image library across physical endpoints, virtual instances, and Azure Virtual Desktop (AVD) platforms. o Build, maintain, and version specialized image variants through the Change Control Board (CCB), including Apple macOS workstations, International/Domestic Loaners, International Assignees, Public Document Room kiosks, and office-specific configurations. o Maintain and update hardware firmware, BIOS baselines, and certified driver packs across all deployed enterprise endpoints. o Provide multi-channel image distribution flexibility across network distribution servers, secure cloud storage, and offline media (USB) * Patch, Release & Deployment Engineering: o Plan, package, test, and execute monthly and out-of-band security updates, OS patches, and third-party software deployments across all workstations and Microsoft servers. o Maintain, validate, and conduct pre-deployment testing within the Enterprise Development and Testing Environment to guarantee environment congruency between Dev, Test, Pre-Production, and Production. o Collaborate with Application Owners, System Administrators, Network & Security Engineering, and Compute & Storage teams to coordinate pre-release regression testing and automated deployment package validation. o Evaluate release/deployment pipelines and author formal recommendations to modernize, consolidate, and streamline enterprise toolsets (e.g., transitioning and consolidating MDT to MECM). * Federal Security, Compliance & Governance: o Harden all workstation builds, images, and server baselines in strict alignment with FISMA, FDCCI, NIST SP 8-series standards, and DISA STIGs. o Partner with the Identity Management Team team to author, test, and scan workstation Group Policy Objects (GPOs) and security baselines. o Coordinate with agency security teams on monthly vulnerability scans, golden image validation, and next-generation endpoint antivirus/malware protection integrations. o Enforce software asset integrity by continuously monitoring for unapproved freeware/shareware and executing immediate (within 4 hours) remediation of unauthorized software. Tier 3 Escalation, Re-Imaging & Continuous Improvement: o Direct Tier 3 incident response for critical workstation, AVD, and imaging failures, driving definitive Root Cause Analyses (RCAs) and developing stable hotfixes/workarounds. o Provide advanced technical guidance and re-imaging assistance to Deskside support teams. o Author and publish standardized Knowledge Base Articles (KBAs) and standard operating procedures to empower Tier 1 and Tier 2 Service Desk staff. o Log all Tier 3 ticket resolutions in the agency ITSM system within required contractual SLAs. Other Responsibilities * Deliver monthly updates to Gold Image with 100% coordination. * Maintain greater than 95% timely completion on all enterprise workstations and MS server patching cycles. * Complete manual image updates within 72 hours of formal request. * Deliver the Weekly Tier 3 RCA & Findings Summary * Update the formal Image Change Log within 7 days of any version release. * Generate monthly reports tracking unauthorized software discoveries and removals. ## Related Videos - [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Challenges of building React and React Native apps](https://www.wearedevelopers.com/videos/448-challenges-of-building-react-and-react-native-apps) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) - [Are Your APIs Ready for AI Agents](https://www.wearedevelopers.com/videos/2004-are-your-apis-ready-for-ai-agents) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)