Windows Desktop Engineering Expert (L3)
Crédit Agricole CIB
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Job summary
Crédit Agricole Corporate and Investment Banking in Singapore seeks an experienced Windows Desktop Engineering Expert (L3) to drive end-user workspace modernization and security for a regulated enterprise.
You will design, implement, and operate large-scale Windows 10/11 environments, MECM/SCCM, and M365, leading OS migrations, compliance, and automation with PowerShell, while collaborating with global teams.
Qualifications
- 8-15+ years in Enterprise Desktop Engineering.
- 5+ years hands-on Windows 10/11 engineering.
- Expert knowledge of Windows 11 Enterprise, M365, AD, Group Policy, PowerShell.
- Strong OSD, Patch Management, and device compliance experience.
- Experience with Citrix VDI, Ivanti, Nexthink, ServiceNow.
Responsibilities
- Design, build, maintain enterprise Windows desktop platforms.
- Lead Windows 10 to Windows 11 migration and modernization.
- Develop and maintain workstation standards, gold images, security baselines.
- Engineer and support MECM/SCCM co-management.
- Validate feature and security updates; deploy via MECM.
- Automate deployment processes using PowerShell and MECM sequences.
- Lead workplace transformation projects with global teams.
Skills
Education
Tools
Job description
Crédit Agricole Corporate and Investment Banking (Crédit Agricole CIB) is the corporate and investment banking arm of Crédit Agricole Group, world’s 10th largest bank by total assets.
Our Singapore center is the 2nd biggest IT setup (after the biggest setup in its Head office in Paris) for Crédit Agricole CIB's worldwide business. We work daily with international branches located in 30 markets by:
- Envisioning and preparing the Bank’s futures information systems
- Partnering and supporting core banking flagships and transverse areas in their large scale development projects
- Providing premium In-house Banking applications
This unique positioning empowers us to bring our core banking business a sustainable competitive advantage on the market.
We seek innovative and agile people sharing our mindset to support ambitious and forthcoming technological challenges.
The Windows Desktop Engineering Expert (L3) is responsible for driving the operational excellence, reliability, and continuous improvement of workstation and end‑user services across the Singapore ISAP office.
We are seeking an experienced Windows Desktop Engineering Expert (L3) to join our Enterprise Workplace Engineering team. The successful candidate will be responsible for designing, engineering, securing, and supporting large-scale Windows desktop environments within a highly regulated enterprise environment.
This role requires deep technical expertise in Windows 11 Engineering, Microsoft 365 technologies, Microsoft Endpoint Configuration Manager (MECM/SCCM), endpoint security, modern workplace services, and advanced troubleshooting. The candidate will act as the highest level of technical escalation for desktop-related issues and will lead strategic initiatives involving workstation modernization, operating system lifecycle management, endpoint compliance, software deployment, and workplace transformation.
- Design, build, maintain, and continuously improve enterprise Windows desktop platforms.
- Lead Windows 10 to Windows 11 migration and modernization initiatives.
- Develop and maintain enterprise workstation standards, golden images, security baselines, and desktop engineering roadmaps.
- Engineer and support Microsoft SCCM/MECM co-management solutions.
- Validate and implement Windows feature updates, security updates, and servicing strategies.
- Assess emerging Microsoft technologies and recommend adoption strategies.
- In-depth troubleshooting of complex Incidents affecting Laptop/Workstations estate.
- Administer and optimize MECM/SCCM infrastructure including:
- Software Distribution
- Operating System Deployment (OSD)
- Patch Management
- Compliance Configuration
- Remote Tools
- Manage distribution points, management points, boundary groups, and content distribution.
- Automate deployment processes using PowerShell and MECM task sequences.
- Drive transition from traditional endpoint management to modern endpoint management capabilities.
- Engineer and support Microsoft 365 services including:
- Microsoft 365 Apps for Enterprise
- Microsoft Teams
- OneDrive for Business
- Microsoft Outlook
- SharePoint Online
- Manage M365 Apps deployment channels and service strategies.
- Optimize endpoint integration with Microsoft cloud services.
- Function as L3 technical escalation for complex desktop and endpoint issues.
- Lead root cause analysis (RCA) for critical incidents and recurring problems.
- Resolve complex issues involving:
- Windows OS
- Group Policy
- M365 Applications
- Endpoint Security (Defender)
- Network Connectivity
- VPN Solutions (F5)
- Citrix VDI
- Application Compatibility investigations & recommandations to developers
- Produce technical reports and improvement recommendations.
- Ensure endpoints comply with enterprise security standards.
- Collaborate with Cybersecurity teams on:
- EDR/XDR Solutions
- Vulnerability Management
- Security Hardening
- Device Compliance
- Support regulatory audits and compliance reviews.
- Implement Corporate & Microsoft Security Baselines, and Zero Trust principles.
- Develop PowerShell automation solutions.
- Improve operational efficiency through scripting and orchestration.
- Create self-healing and proactive remediation solutions.
- Lead workplace technology projects from design through implementation.
- Collaborate with global infrastructure teams, security teams, application owners, and external vendors.
- Prepare technical documentation, architecture diagrams, SOPs, and HLD/LLD documentation.
- Participate in change management and CAB processes.
- English Language (French – good to have).
- Flexibility in working hours & 2 Shift’s (8am-5pm/10am-8pm) Weekend/on-call (24/7 rotation) and/or emergencies during major incidents/projects.
- 8-15+ years' experience in Enterprise Desktop Engineering.
- Minimum 5 years of hands-on Windows 10/11 engineering experience.
- Expert-level knowledge of:
- Windows 11 Enterprise
- Microsoft 365
- Active Directory
- Group Policy
- PowerShell Scripting
- Strong experience with:
- Operating System Deployment (OSD)
- Patch Management
- Application Packaging (Basics)
- Device Compliance
- Modern Workplace Solutions (Laptop & Desktop Hardware & Trading solutions)
- Citrix Virtual Apps & Desktops (Basics)
- AppSense / Ivanti
- Nexthink
- ServiceNow
- Demonstrable experience troubleshooting:
- Blue Screen (BSOD) analysis
- Windows Performance Issues
- Authentication issues
- Outlook and Teams issues
- Office activation issues
- SCCM client health issues
- Endpoint compliance failures
- VPN and network connectivity issues
- Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.
- Microsoft Certifications related to Desktops/M365/MECM/SCCM/Intune.
- Other IT certifications related to IT Security, Infrastructure Management, Networking is an advantage.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
