Digital Workplace Engineer - Global Hedge Fund - Hong Kong

NLS Executive Search; Hong Kong; On-site; HKD 420,000 - 650,000; Full time

Job summary

NLS Executive Search client, a global hedge fund in Hong Kong, seeks a Digital Workplace Engineer to design, build, and continuously improve Windows-based services across physical and virtual desktops. You will focus on Windows 11, Intune, Autopilot, Group Policy, Citrix DaaS, and automation to deliver secure, high-performing endpoints.

You will own end-to-end endpoint lifecycle, implement security/compliance, develop PowerShell automation, and collaborate with a global team, with occasional

Qualifications

• Hands-on enterprise experience with Microsoft Intune and Windows Autopilot.
• Strong experience engineering and supporting enterprise Windows 10/11 environments.
• Advanced PowerShell scripting and automation skills.

Responsibilities

• Engineer, support, and maintain enterprise Windows 11 environments across physical and virtual platforms.
• Design, manage, and improve Windows Autopilot provisioning and device deployment processes.
• Configure and manage device security, compliance, and software deployment using Microsoft Intune and Group Policy.
• Support and optimise Citrix DaaS, including image management and logon performance.
• Deliver workspace and user environment solutions, including workspace/profile management and personalization.
• Develop PowerShell automation for provisioning, deployment, endpoint health checks, and remediation.
• Own endpoint lifecycle activities end-to-end from provisioning to patching and decommissioning.
• Serve as regional escalation point for EUC issues and create reports on endpoint health and security.

Skills

Intune

Windows Autopilot

PowerShell

Group Policy

Citrix DaaS

Windows 11

VDI / DaaS

Endpoint lifecycle

Troubleshooting

Automation

Tools

Intune

Windows OS

Active Directory

Entra ID

Powershell

Job description

Our client, a global hedge fund, are actively seeking a digital workplace engineer to join their expanding team in Hong Kong. You will help design, build, and continuously improve the Windows-based services used across their firm, with a strong focus on Windows 11, Microsoft Intune, Windows Autopilot, Group Policy, Citrix DaaS, and automation. You will also ensure users experience a secure, consistent, and high-performing environment across both physical and virtual desktops.

The role:

• Engineer, support, and maintain enterprise Windows 11 environments across physical and virtual platforms
• Design, manage, and improve Windows Autopilot provisioning and device deployment processes
• Configure and manage device security, compliance, and software deployment using Microsoft Intune and Group Policy
• Support and optimise Citrix DaaS, including image management, logon performance, and overall user experience
• Deliver workspace and user environment solutions, including workspace/profile management and end-user personalisation
• Develop PowerShell automation for provisioning, application deployment, endpoint health checks, and remediation
• Own endpoint lifecycle activities end-to-end, from initial provisioning through patching and decommissioning
• Serve as the regional escalation point for complex or business-critical EUC issues
• Create reporting covering endpoint health, patching status, BitLocker, and security/compliance adherence
• Contribute to global endpoint standards and EUC engineering projects
• Occasional travel to other APAC offices may be required

What you offer:

• Hands-on enterprise experience with Microsoft Intune and Windows Autopilot
• Strong experience engineering and supporting enterprise Windows 10/11 environments
• Advanced PowerShell scripting and automation skills
• Experience supporting Citrix DaaS, VDI, or an equivalent virtual desktop platform
• Experience designing and managing Group Policy
• Experience with workspace management, profile management, and user personalization technologies
• Solid understanding of Active Directory, Entra ID, authentication, and hybrid identity
• Experience with endpoint security, patching, and application deployment
• Strong troubleshooting ability and clear communication skills
• Ability to work independently within APAC while contributing effectively to a global team
• Experience with Microsoft 365, PKI, or infrastructure-as-code tooling would be advantageous