Desktop Engineer

Vaco; Jacksonville (FL); On-site; USD 75,000 - 110,000; Full time

Job summary

Vaco by Highspring is seeking a Desktop Engineer to deliver a secure, scalable end-user computing experience across the enterprise. The role owns workstation deployment, device management, and lifecycle governance to streamline operations and strengthen security.

You will partner with infrastructure, security, and support teams to develop automated deployment, governance, and modernization initiatives that enhance the employee technology experience across Windows and mobile endpoints.

Qualifications

• Five+ years of experience supporting and engineering enterprise endpoint environments.
• Experience administering modern device management solutions.
• Experience managing large-scale workstation deployments and OS migrations.

Responsibilities

• Design and maintain enterprise endpoint management solutions.
• Define standards for workstation provisioning, configuration, and ongoing support.
• Develop automated deployment and enrollment processes for corporate devices.
• Establish and maintain endpoint governance, policies, and technical standards.
• Drive modernization efforts that improve the employee technology experience.
• Oversee endpoint deployment from provisioning through retirement.
• Maintain OS upgrade strategies and refresh programs.
• Manage desktop/laptop standards and ensure consistent configurations.
• Support multi-platform environments including Windows and mobile.
• Develop application deployment strategies and packaging standards.
• Manage OS, security, and application update processes.
• Coordinate testing, validation, and rollout for enterprise releases.
• Identify opportunities to automate software distribution and maintenance tasks.

Skills

Endpoint management

Automation scripting

Cross-functional collaboration

Security awareness

Education

Bachelor's degree in IT/CS/Engineering

Tools

Microsoft Intune

MECM/SCCM

Windows endpoint administration

Microsoft 365 endpoint technologies

Active Directory

Group Policy

Endpoint automation and scripting

Job description

Desktop Engineer

Role Summary

The Desktop Engineer is responsible for delivering a secure, scalable, and modern end-user computing experience across the enterprise. This position owns the technologies, processes, and standards that support workstation deployment, device management, software delivery, endpoint security, and lifecycle governance.

Working closely with infrastructure, security, and support teams, this individual will develop solutions that improve operational efficiency, enhance security posture, and simplify device administration across a diverse endpoint ecosystem.

What You'll Do

Build and Optimize Endpoint Services

• Design and maintain enterprise endpoint management solutions.


• Define standards for workstation provisioning, configuration, and ongoing support.


• Develop automated deployment and enrollment processes for corporate devices.


• Establish and maintain endpoint governance, policies, and technical standards.


• Drive modernization efforts that improve the employee technology experience.

Manage Device Lifecycle Operations

• Oversee endpoint deployment from initial provisioning through retirement.


• Maintain operating system upgrade strategies and refresh programs.


• Manage enterprise desktop and laptop standards.


• Ensure consistent configurations across user populations and business units.


• Support multi-platform endpoint environments, including Windows and mobile technologies.

Deliver Software and Updates

• Develop application deployment strategies and packaging standards.


• Manage operating system, security, and application update processes.


• Coordinate testing, validation, and rollout activities for enterprise releases.


• Identify opportunities to automate software distribution and maintenance tasks.


• Minimize business disruption while maintaining current and secure systems.

Strengthen Endpoint Security

• Implement controls that support organizational cybersecurity objectives.


• Partner with security teams to address vulnerabilities and compliance requirements.


• Monitor endpoint health, policy enforcement, and device compliance metrics.


• Support hardening initiatives and security remediation efforts.


• Participate in incident response and root cause analysis when endpoint systems are involved.

Advanced Technical Support

• Serve as the highest level of escalation for endpoint-related issues.


• Investigate complex operating system, application, and device management problems.


• Perform technical analysis and recommend long-term solutions to recurring issues.


• Mentor support personnel and provide technical guidance across IT teams.

Reporting, Analytics, and Process Improvement

• Create dashboards and reporting that provide visibility into asset health, deployment success, compliance, and software utilization.


• Analyze trends and recommend improvements to endpoint operations.


• Document architecture, standards, procedures, and support models.


• Continuously evaluate emerging technologies and recommend enhancements.

Minimum Qualifications

Professional Experience

• Five or more years of experience supporting and engineering enterprise endpoint environments.


• Demonstrated experience administering modern device management solutions.


• Experience managing large-scale workstation deployments and operating system migrations.


• Background supporting structured release, patching, and change management processes.

Technical Expertise

Experience in several of the following areas:

• Microsoft Intune


• Microsoft Endpoint Configuration Manager (MECM/SCCM)


• Windows endpoint administration


• Microsoft 365 endpoint technologies


• Active Directory


• Group Policy administration


• Endpoint compliance and security controls


• Software packaging and deployment


• Endpoint automation and scripting

Education

• Bachelor's degree in Information Technology, Computer Science, Engineering, or a related discipline; equivalent professional experience may be considered in lieu of a degree.

Required Credential

• Microsoft 365 Certified: Endpoint Administrator Associate

Preferred Qualifications

• Experience with Azure-based device management solutions.


• Familiarity with identity and access management technologies.


• Knowledge of networking concepts, including DNS, DHCP, TCP/IP, and VPN technologies.


• Experience with desktop, application, or virtual desktop virtualization platforms.


• Exposure to macOS, Linux, and mobile device management environments.


• Proficiency with PowerShell or similar automation tools.

Preferred Certifications

• CompTIA A+


• CompTIA Network+


• CompTIA Security+


• Microsoft Azure Fundamentals


• Azure Administrator Associate

Success Profile

The successful candidate combines deep technical expertise with a continuous-improvement mindset. They are comfortable designing solutions, leading initiatives, resolving complex technical issues, and influencing technology standards across the organization. This individual is passionate about automation, endpoint security, operational excellence, and creating a reliable, modern computing experience for employees.

EEO Notice

Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law.

Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact [e-mail].

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.

Representation Notice

By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present you as a candidate for the foregoing employment opportunity. You further agree to represent information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.

For residents of Ontario, Canada: Based on Highspring's discussions with its Client, Highspring's understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly).

Privacy Notice

Vaco by Highspring and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") respects your privacy and are committed to providing transparent notice of our policies.

• California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.


• Virginia residents may access our state specific policies here.


• Residents of all other states may access our policies here.


• Canadian residents may access our policies in English here and in French here.


• Residents of countries governed by GDPR may access our policies here.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring.

Pay Transparency Notice

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

• the individual's skill sets, experience and training;


• licensure and certification requirements;


• office location and other geographic considerations;


• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.