Desktop Engineer / Specialist (MDM / Active Directory)

Trigyn; City of Albany (NY); On-site; USD 75,000 - 120,000; Full time

Job summary

Trigyn Technologies, Inc. is seeking a Desktop Engineer / Specialist in Albany, NY to build, test, and update standardized OS images using PDQ, MECM/SCCM, MDT, or SmartDeploy. You will maintain drivers, configure provisioning workflows, and patch systems monthly while ensuring security and compliance across the fleet.

You will mentor junior staff, write technical docs, and collaborate with AD/Entra ID and network teams to align endpoint configurations with security policies.

Qualifications

• Requires field experience in Desktop Engineering with independent work capability.
• 84 months experience in Desktop Engineering and related areas.
• 84 months in Active Directory group policy and networking concepts.

Responsibilities

• Build, test, and update OS images (Windows/macOS) using deployment tools.
• Maintain hardware drivers/BIOS in deployment sequences.
• Configure provisioning workflows for remote and on-site users.
• Evaluate new computer models for image compatibility.
• Deploy monthly OS and app patches to mitigate vulnerabilities.
• Monitor endpoint security (EDR/AV/Firewalls) for fleet compliance.
• Review vulnerability reports and apply remediation scripts.
• Manage drive encryption via GPOs or MDM policies.
• Package apps with scripting (PowerShell/VBScript) and deploy silently.
• Maintain self-service software portal for user installs.
• Monitor application versions to enforce standardization.
• Serve as Tier 3/4 escalation for complex endpoint issues.
• Collaborate with admins to align with AD/Entra ID and network security.
• Use analytics to identify and fix performance bottlenecks.

Skills

Independent work

Troubleshooting

Documentation

Mentorship

Policy enforcement

Education

MS Windows certifications

Tools

PDQ

MECM/SCCM

MDT

SmartDeploy

PowerShell

VBScript

Group Policy

Job description

Trigyn's direct government client has an immediate need for a Desktop Engineer / Specialist in Albany, NY.

Description

• Build, test, and update standardized operating system images (e.g., Windows, macOS) using deployment tools such as PDQ, MECM/SCCM, MDT, or SmartDeploy.
• Maintain and inject up-to-date hardware drivers and BIOS/firmware packages into deployment task sequences.
• Configure and optimize modern provisioning workflows to streamline out-of-box experiences for remote and on-site users.
• Evaluate new computer models and hardware to ensure they align with existing corporate images and software configurations.
• Schedule, test, and deploy monthly operating system and third-party application patches (e.g., browsers, Adobe, Java) to mitigate vulnerabilities.
• Monitor and maintain endpoint security software (EDR/MDR, antivirus, firewalls, and data loss prevention tools) to ensure 100% compliance across the fleet.
• Review security vulnerability reports and execute targeted remediation scripts or configuration changes.
• Manage and audit drive encryption (BitLocker, FileVault) and enforce compliance policies via Group Policy Objects (GPOs) or Mobile Device Management (MDM) policies.
• Package, test, and silently deploy critical business and development applications using scripting languages (PowerShell, VBScript) or packaging tools.
• Maintain the company’s self-service software portal, allowing users to install pre-approved software without requiring local administrative rights.
• Monitor application versions across the environment to ensure standardization and prevent the use of unauthorized or end-of-life software.
• Serve as the final escalation point (Tier 3/4) for complex, persistent endpoint issues that Tier 1 and Tier 2 support teams cannot resolve.
• Collaborate with system administrators and network engineers to ensure endpoint configurations align with identity management (Active Directory, Entra ID) and network security protocols.
• Utilize endpoint analytics and telemetry tools to proactively identify and resolve system performance bottlenecks before they impact end-users.
• Provide technical guidance, mentorship, and training to junior desktop support technicians and helpdesk staff to build team capabilities.
• Write and maintain detailed technical documentation, including Standard Operating Procedures (SOPs), system architecture diagrams, and knowledge base articles for IT staff and end-users.
• Independently identify inefficiencies in current deployment or support workflows and design automated solutions to resolve them.

Mandatory Qualification

• Works in the field of Information Technology, experienced in the usage and support of a collection of development platforms, technical architectures or business applications and products that run on those platforms - beyond that of a Programmer.
• Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education.
• 84 months experience in the field of Desktop Engineering
• 84 months experience with technical approaches in design, build testing and debugging problems
• 84 months experience in mobile device management (MDM) solution
• 84 months experience with Active Directory group policy standard
• 84 months experience with Networking concepts (DHCP, VLANS, ACLs, Firewalls, etc.)
• 84 months experience with organizational skills and ability to handle multiple tasks and shifting priorities
• 84 months experience in Windows 11 including 64-bit operating systems
• 84 months of scripting language experience - Power Shell & VB Script preferred
• 84 months experience with client-based security management tools including anti-virus, PKI, HHD encryption, and general client-based security hardening
• 84 months experience with Window image deployment and package creation/management
• 84 months experience with advanced troubleshooting and support for VPN, 2 Factor Authentication and network printing
• 84 months active directory management experience
• 84 months experience with cyber security best practices and compliance
• 84 months experience with Intel workstations hardware and operating systems
• 84 months experience analyzing and problem-solving hardware/software issues
• 84 months of engineering experience; research, analysis, planning and implementation
• Certifications relevant to MS Windows

TRIGYN TECHNOLOGIES, INC. is an EQUAL OPPORTUNITY EMPLOYER and has been in business for 35 years. TRIGYN is an ISO 27001:2022 and CMMI Level 5 certified company.