Security Engineer

Job Description

This role will collaboratively support a global strategic objective to harmonize the end-to-end Microsoft lifecycle and environment spanning the enterprise.

Primary activities/responsibilities

• Manage and administer Enterprise devices via approved tools (Microsoft Intune, MECM).
• Create/maintain Operating System images & automated deployment methodology (Windows Autopilot).
• Create automated software and solutions packages for deployment to Enterprise devices.
• Manage and oversee monthly Windows Security Patch deployment.
• Manage and oversee mass software update/deployment efforts to Enterprise devices.
• Generate and manage various reports as requested.
• Virtual Desktop deployment and administration.
• Zero/Thin Client deployment and administration.
• Perform routine environmental assessment exercises and ensure the continued enhancement/modernization of the end-user computing environment.
• Participate in Major Incident response activities; ensure timely remediation of outage(s), perform root cause analysis, and develop/implement long-term solution to mitigate future risk.
• Research complex technical problems and identify, implement, and communicate technical fixes.
• Function as a resource for projects, including new hardware/software solution introduction, Windows/Office365 upgrades, and other technology advancement initiatives.
• Partner with the Security team to engineer solutions for end-user device security.
• Function as a technical escalation point for large-scale or aging end-user problems.
• Serve as a third line of support after all tiered resources have been exhausted.
• Partner with 3rd party vendors to deliver results in various support/project-based initiatives.
• Compose and maintain Policies & Procedures documentation.
• Serve as a mentor/Subject Matter Expert for Desktop Engineering team members, as well as Technical/Desktop Support staff
• Conduct regular audit on Access and Role
• Implement and manage Azure Identity protection and conditional Access Policies

QUALIFICATIONS

Basic Qualifications

• 5 years of experience in end-user device engineering.
• 5 years of experience with Mobile Device Management (MDM) tools, including Windows Autopilot and Intune (Microsoft Endpoint Manager.)
• Professional Certifications desired (Microsoft Modern Desktop Administrator, MSCE, AWS Solutions Architect, Network , A , etc.).
• Experience deploying and administrating virtual desktop solutions, including Microsoft Windows 365, Microsoft AVD, Amazon Workspaces, Hyper-V, and VMWare.
• Experience with environmental management and administration via Azure Active Directory.
• Experience with AD Migration Tool (Quest)
• Strong professional and interpersonal skills, including exceptional customer service, creative problem solving, effective written and verbal communications, planned and organized coordination of cross-functional teams, acute attention to detail and quality, and ability to self-manage.
• Expert troubleshooting skills surrounding complex technical end-user device issues in large, distributed environments.
• Expert understanding of Windows 10/11 Operating System.
• Expert understanding of Microsoft Windows Security Patching process.
• Expert understanding of Device/User Policy administration.
• Expert understanding of Windows Registry architecture.
• Advanced knowledge of various scripting methodologies (PowerShell, SQL, AWS CLI, Python, etc.).
• Advanced understanding of Microsoft Office 365 product deployment/administration.
• Strong Microsoft Office365 application suite usage skillset, including Teams, Visio, and SharePoint.
• Fluent in using and administering multiple Operating Systems (Windows 10/11, Windows Server, Mac OS X, Linux, etc.).
• Basic understanding of network infrastructure and protocols.
• Detail-oriented with the ability to prioritize and manage multiple projects.
• Ability to work occasionally after hours and weekends.
• Strong expertise in Microsoft Purview
• Expertise in building data classification and labeling programs to support the organization's data management and governance for the enterprise.
• Strong experience in data security and data governance
• Familiar with data posture management solutions to optimize data identification and data mapping.
• Strong understanding of the security E5 features that can be used to accelerate work effort
• Experience with working with IoT devices