Senior Desktop Engineer: Automation & Enterprise Imaging

NeevSys Inc; Gaithersburg (MD); On-site; USD 85,000 - 120,000; Full time

Job summary

HRSA's Division of Enterprise User Support (DEUS) seeks a Desktop Engineer III to provide elevated Level 3 desktop engineering support across HRSA offices and facilities. You will sustain and improve the desktop environment, automation processes, and workstation infrastructure in a fast-paced federal environment.

This role collaborates with federal desktop engineers and IT teams, trains staff, develops documentation, and leads software deployments and imaging projects using Tanium, Intune, and

Qualifications

• Demonstrated experience performing desktop engineering or endpoint management in an enterprise environment supporting 2,000+ users.
• Experience creating and testing software deployment packages and GPOs following change control procedures.
• Proficiency with PowerShell scripting, automation, and configuration compliance enforcement.
• Understanding of CIS Benchmark standards and federal information security controls.

Responsibilities

• Provide Tier 3 troubleshooting and resolution for hardware and software incidents escalated from Tier 1 and Tier 2 support.
• Interface with federal desktop engineering staff and other OIT divisions to resolve complex or cross-system issues.
• Train new Desktop Support technicians on HRSA systems, tools, and procedures.
• Collaborate with the Knowledge Management Team to develop training materials and deliver instruction to technicians, DEUS staff, and end users.
• Create and maintain ServiceNow Knowledge Base articles on advanced troubleshooting and configuration standards.
• Develop and maintain technical documentation for engineered solutions, imaging processes, and software deployment standards.
• Support enterprise software deployments using Tanium Endpoint Management or other HRSA-approved tools.
• Develop automated installation packages and uninstall routines, with full documentation.
• Test packages per the established testing SOP and verify successful operation.
• Plan and execute deployment activities per HRSA change management policy.
• Troubleshoot deployment failures and report progress to DEUS leadership.
• Develop and automate workstation configuration changes using Tanium, Microsoft Intune, or Active Directory GPOs.
• Document automated updates, rollback procedures, and testing results.
• Implement and validate changes per approved Technical Implementation Plans (TIPs).
• Maintain and enhance HRSA's workstation imaging process using Tanium or other approved platforms.
• Update base images at least quarterly for current drivers, BIOS, and baseline configurations.
• Validate and test new workstation models added to HRSA inventory.
• Develop and publish image release notes summarizing updates and changes.
• Support federal desktop engineers in creating, modifying, and testing GPOs within Quest GPOAdmin or Intune.
• Follow established SOPs for GPO creation, testing, and deployment.
• Prepare documentation, TIPs, and Change Approval Board (CAB) submissions.
• Provide Tier 3 support for ~130 networked printers and multifunction devices (MFDs).
• Maintain print servers, print queues, and managed print systems (e.g., Netaphor SiteAudit).
• Troubleshoot escalated incidents, coordinate vendor repairs, and recommend improvements.
• Ensure consistent operation of Follow Me Print and Scan to Email systems, including documentation and upgrades.

Skills

Tanium Endpoint Management

Microsoft Intune

Active Directory Group Policy

Windows 10/11 administration

PowerShell scripting

Automation

CIS Benchmarks

Federal information security controls

Tools

Quest GPOAdmin

Job description

HRSA's Division of Enterprise User Support (DEUS) seeks a Desktop Engineer III to provide elevated Level 3 desktop engineering support across HRSA offices and facilities. You will sustain and improve the desktop environment, automation processes, and workstation infrastructure in a fast-paced federal environment.

This role collaborates with federal desktop engineers and IT teams, trains staff, develops documentation, and leads software deployments and imaging projects using Tanium, Intune, and