Windows Desktop Engineer

Crédit Agricole CIB; Singapore; On-site; SGD 130,000 - 180,000; Full time

Job summary

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) in Singapore seeks an experienced Windows Desktop Engineering Expert (L3) to drive design, engineering, security and support of large-scale Windows desktop environments in a regulated enterprise. You will lead modernization and lifecycle management across MECM/SCCM, M365, and security initiatives.

The role requires 8-15+ years in enterprise desktop engineering, hands-on Windows 10/11 experience, and strong scripting with

Qualifications

• 8-15+ years in enterprise desktop engineering.
• Minimum 5 years of hands-on Windows 10/11 engineering experience.
• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.
• Microsoft certifications related to Desktops/M365/MECM/SCCM/Intune are required or highly preferred.

Responsibilities

• Design, build, maintain, and continuously improve enterprise Windows desktop platforms.
• Lead Windows 10 to Windows 11 migration and modernization initiatives.
• Develop and maintain enterprise workstation standards, golden images, security baselines, and desktop engineering roadmaps.
• Engineer and support MECM/SCCM co-management and deployment workflows.
• Validate and implement Windows feature and security updates; manage servicing strategies.

Skills

Windows 11

M365

PowerShell

SCCM/MECM

Education

Bachelor's Degree in CS/IT

Tools

Citrix VDI

Nexthink

ServiceNow

Job description

Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.

Our Singapore center is the 2nd largest IT setup (after Paris Head Office) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:

• Envisioning and preparing the Bank’s futures information systems
• Partnering and supporting core banking flagships and transverse areas in their large-scale development projects
• Providing premium In-house Banking applications

This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market. We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.

Position Overview

The Windows Desktop Engineering Expert (L3) is responsible for driving the operational excellence, reliability, and continuous improvement of workstation and end‑user services across the Singapore ISAP office. We are seeking an experienced Windows Desktop Engineering Expert (L3) to join our Enterprise Workplace Engineering team.

The successful candidate will be responsible for designing, engineering, securing, and supporting large-scale Windows desktop environments within a highly regulated enterprise environment.

This role requires deep technical expertise in Windows 11 Engineering, Microsoft 365 technologies, Microsoft Endpoint Configuration Manager (MECM/SCCM), endpoint security, modern workplace services, and advanced troubleshooting. The candidate will act as the highest level of technical escalation for desktop-related issues and will lead strategic initiatives involving workstation modernization, operating system lifecycle management, endpoint compliance, software deployment, and workplace transformation.

Key Responsibilities

• Design, build, maintain, and continuously improve enterprise Windows desktop platforms.
• Lead Windows 10 to Windows 11 migration and modernization initiatives.
• Develop and maintain enterprise workstation standards, golden images, security baselines, and desktop engineering roadmaps.
• Engineer and support Microsoft SCCM/MECM co-management solutions.
• Validate and implement Windows feature updates, security updates, and servicing strategies.
• Assess emerging Microsoft technologies and recommend adoption strategies.
• In-depth troubleshooting of complex Incidents affecting Laptop/Workstations estate.
• Administer and optimize MECM/SCCM infrastructure including:
  - Software Distribution
  - Operating System Deployment (OSD)
  - Patch Management
  - Compliance Configuration
  - Remote Tools
  - Manage distribution points, management points, boundary groups, and content distribution.
• Automate deployment processes using PowerShell and MECM task sequences.
• Drive transition from traditional endpoint management to modern endpoint management capabilities.
• Engineer and support Microsoft 365 services including:
  - Microsoft 365 Apps for Enterprise
  - Microsoft Teams
  - OneDrive for Business
  - Microsoft Outlook
  - SharePoint Online
  - Manage M365 Apps deployment channels and service strategies.
  - Optimize endpoint integration with Microsoft cloud services.

Advanced Troubleshooting & Problem Management

Function as L3 technical escalation for complex desktop and endpoint issues.

Lead root cause analysis (RCA) for critical incidents and recurring problems.

Resolve complex issues involving:

• Windows OS
• Group Policy
• M365 Applications
• Endpoint Security (Defender)
• Network Connectivity
• VPN Solutions (F5)
• Citrix VDI
• Application Compatibility investigations & recommendations to developers

Produce technical reports and improvement recommendations.

Security & Compliance

Ensure endpoints comply with enterprise security standards.

Collaborate with Cybersecurity teams on:

• EDR/XDR Solutions
• Vulnerability Management
• Security Hardening
• Device Compliance
• Support regulatory audits and compliance reviews.
• Implement Corporate & Microsoft Security Baselines, and Zero Trust principles.
• Develop PowerShell automation solutions.
• Improve operational efficiency through scripting and orchestration.
• Create self-healing and proactive remediation solutions.
• Lead workplace technology projects from design through implementation.
• Collaborate with global infrastructure teams, security teams, application owners, and external vendors.
• Prepare technical documentation, architecture diagrams, SOPs, and HLD/LLD documentation.
• Participate in change management and CAB processes.

Job specific environment and/or organization

• English Language (French – good to have).
• Flexibility in working hours & 2 Shift’s (8am-5pm/10am-8pm) Weekend/on-call (24/7 rotation) and/or emergencies during major incidents/projects.

Required Skills and Experience

Technical Expertise

8-15+ years' experience in Enterprise Desktop Engineering.

Minimum 5 years of hands-on Windows 10/11 engineering experience.

Expert-level knowledge of:

• Windows 11 Enterprise
• Microsoft 365
• Active Directory
• Group Policy
• PowerShell Scripting

Strong experience with:

• Operating System Deployment (OSD)
• Patch Management
• Application Packaging (Basics)
• Device Compliance
• Modern Workplace Solutions (Laptop & Desktop Hardware & Trading solutions)
• Citrix Virtual Apps & Desktops (Basics)
• AppSense / Ivanti
• Nexthink
• ServiceNow

Troubleshooting Expertise

• Demonstrable experience troubleshooting:
• Blue Screen (BSOD) analysis
• Windows Performance Issues
• Authentication issues
• Outlook and Teams issues
• Office activation issues
• SCCM client health issues
• Endpoint compliance failures
• VPN and network connectivity issues

Qualifications/Education

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.

Mandatory Certifications

• Microsoft Certifications related to Desktops/M365/MECM/SCCM/Intune.
• Other IT certifications related to IT Security, Infrastructure Management, Networking is an advantage.

NOTE:

• For fair employment practices, we are keen on Singaporeans/SPR ONLY.
• Shift based role- 2 Shifts (8am-5pm/10am-8pm) Weekend/on-call (24/7 rotation)
• This is a contract- 12 months with bank. Renewable subject to performance.