Microsoft Systems Engineer

Primarily responsible for engineering efforts related to all aspects of Windows clients using Traditional and Modern Device Management and other appropriate technologies. This job also includes the responsibility of all aspects of custom Windows imaging for all endpoints within the organization so that they adhere to outlined security guidelines and meet all requirements of the business to provide an excellent end-user experience and perfect interoperability with business systems. This position is also expected to be the subject matter expert for Windows clients and client management and as such act as the highest escalation point for issues.

ESSENTIAL DUTIES & RESPONSIBILITIES:
• Using expert knowledge of the Windows OS and related technologies, utilize Microsoft Deployment Toolkit, Group Policy, Modern and Traditional device management technologies (primarily BigFix, Intune and Autopilot) to develop, create, provision, and manage custom images.
• Perform testing, QA, and pilots to ensure secure baselines are in place and that the image is 100% functional and compatible with business systems and hardware models and peripherals.
• Use PowerShell and/or Visual Basic scripting to automate required changes to endpoint configurations and to deliver consistent and predictable products.
• Provide engineering and support for other client management solutions such as Trend Micro’s Apex One and Solar Winds Dameware.
• Create automated software and solutions packages for deployment to Enterprise devices.
• Manage and oversee mass software update/deployment efforts to Enterprise devices.
• Support application packaging, deployments, documentation, and release control in an Enterprise environment.
• Develop and document architectural design for endpoint hardware as well as operating systems configurations and management capabilities.
• Write documentation, including project plans, backup plans, business continuance, installation procedures, and troubleshooting tips.
• Manage incidents with vendors in the event of a problem relating to a supported hardware or software platform.
• Manage and oversee monthly Windows Security Patch deployment and remediation.
• Provide detailed reports on endpoints and manage to KPIs.
• Consistently develop and introduce efficiencies and automation to improve UX.
• Develop strategies, understand business/endpoint needs, and deploy adequate solutions.
• Recommend and assist in the development of technology roadmaps.
• Other duties as assigned.

REQUIRED QUALIFICATIONS:

Skills & Qualifications required:
• 10+ years of experience specializing in Windows desktop, server, and enterprise technologies Microsoft Windows 7 and Windows 10 operating systems including configuration, customization, and automation.
• 10+ years of Active directory experience including establishing and management of GPOs to enable features and control security settings.
• 7+ years of Enterprise level expertise with the following technologies:
o Desktop Management via BigFix / SCCM / Intune / Autopilot
o Modern Device Management/Universal Endpoint Management
o Imaging development and deployments through Microsoft Deployment Toolkit using task sequencing, ODT software deployment, and software packaging.
o Expert understanding of Windows 10 Operating System, including build updates.
o Expert understanding of Windows Registry architecture.
o Advanced knowledge of various scripting methodologies (PowerShell, VB, etc.).
• 7+ years of experience using enterprise client management solutions to create, manage and deploy application packages, operating systems images, and patches.
• Experience configuring and maintaining Microsoft Windows security best practices in a PCI environment. Includes an expert understanding of Microsoft security patching process and hands on experience using SCCM or BigFix to patch workstations in an enterprise.
• Experience with environmental management and administration via Azure Active Directory.
• High level understanding of cloud technologies and service-oriented architecture
• Advanced understanding of Microsoft Office 365 product deployment/administration.
• Professional Certifications desired (Microsoft Modern Desktop Administrator, MSCE, Network+, A+, etc.).
• High level understanding of networking principles i.e VLAN’s, NAT/SNAT
• Working knowledge of Windows registry, event logs and file system for troubleshooting/configuration
• Highly detail-oriented and with excellent analytical and problem-solving skills
• Excellent troubleshooting and customer service skills.

Physical Requirements:
• This position requires repetitive use of the hands to finger, handle or feel; reaching with hands and arms; standing and sitting for extended periods of time. Employee is prohibited from lifting more than 50 pounds without additional employee assistance, or without the use of specialty equipment designed to lift heavy weight.
• Travel is rare and is mainly limited to traveling to local training facilities by car. On very rare occasions this person may need to fly to another state for business reasons.

This position description intends to describe the general nature and level of work being performed by people assigned to this job. It is not intended include all duties and responsibilities. The order in which duties and responsibilities are listed is not significant.