Senior Windows Endpoint Engineer

Randstad Digital Americas; New York (NY); On-site; USD 69,000 - 83,000; Part time

Benefits offered by this job

Medical insurance

Prescription coverage

Dental insurance

Vision care

AD&D insurance

Life insurance

Short-term disability

401K plan

Job summary

Randstad Digital Americas seeks a Senior Windows Endpoint Engineer to own the Windows client platform end-to-end—from imaging to user experience. You will drive the architecture behind SCCM and Intune, ensuring devices provision predictably, stay secure, and perform across all management planes.

The role requires 7+ years in Windows endpoint engineering with SCCM, Intune, Autopilot, and PowerShell scripting, along with modern cloud policy experience.

Qualifications

• 7+ years of Windows endpoint or desktop engineering in large or complex environments.
• Hands-on mastery of Microsoft Configuration Manager (SCCM) site administration, OSD, task sequence engineering, and WinPE.
• Experience with Microsoft Intune, Autopilot, compliance policies, settings catalog, and Win32 app delivery.

Responsibilities

• Own and author Windows OS deployment designs, task sequences, WinPE, driver packages, and Autopilot provisioning.
• Engineer and maintain Configuration Manager and Microsoft Intune estates, managing co-management workloads and cloud transitions.
• Design and manage cloud patching strategies utilizing Windows Update for Business, update rings, and expedited updates.

Skills

OS deployment design

SCCM administration

Intune management

Autopilot provisioning

PowerShell scripting

BitLocker security

ASR rules

GPO modernization

Education

Bachelor's degree

Tools

Microsoft Intune

ConfigMgr / SCCM

WinPE

Autopilot

Job description

Job Summary

The Senior Windows Endpoint Engineer takes complete ownership of the Windows client platform end-to-end-from bare-metal imaging to day-to-day user experience. In this position, you will drive the architecture behind our Microsoft Configuration Manager and Intune environments, ensuring devices provision predictably, stay secure, and deliver optimal performance across all management planes.

Job Summary

The Senior Windows Endpoint Engineer takes complete ownership of the Windows client platform end-to-end-from bare-metal imaging to day-to-day user experience. In this position, you will drive the architecture behind our Microsoft Configuration Manager and Intune environments, ensuring devices provision predictably, stay secure, and deliver optimal performance across all management planes.

location: New York, New York

job type: Contract

salary: $50 - 60 per hour

work hours: 8am to 5pm

education: Bachelors

Responsibilities

• Own and author Windows OS deployment designs, task sequences, WinPE, driver packages, and Autopilot provisioning.
• Engineer and maintain Configuration Manager and Microsoft Intune estates, managing co-management workloads and cloud transitions.
• Design and manage cloud patching strategies utilizing Windows Update for Business, update rings, and expedited updates.
• Develop production-grade, signed PowerShell scripts for automated device provisioning, drift control, and proactive remediations.
• Maintain endpoint security baselines, including BitLocker, Attack Surface Reduction (ASR) rules, AppLocker/WDAC, and LAPS.
• Rationalize legacy Group Policy (GPO) architecture and convert workloads to modern cloud policies.

Qualifications

7+ years of experience in Windows endpoint or desktop engineering in large or complex environments. Hands-on mastery of Microsoft Configuration Manager (SCCM) site administration, OSD, task sequence engineering, and WinPE. Demonstrated experience with Microsoft Intune, Autopilot, compliance policies, settings catalog, and Win32 app delivery. Strong skills in production-grade PowerShell scripting with advanced error handling, logging, and idempotency. In-depth understanding of Windows internals, application packaging (MSI, Win32, MSIX), and core backend services (AD, Entra ID, PKI, DNS, DHCP).

Preferred Qualifications

Proven experience migrating on-premises ConfigMgr workloads to cloud management with full parity validation. Experience delivering zero-touch or pre-provisioned Autopilot deployments at scale. Microsoft certifications such as MD-102, SC-200, SC-100, or MCSE.

Skills

Application Packaging,bare-metal,BitLocker,build engineering,security baselines,cloud applications,Cloud,Configuration Manager,Autopilot,firmware,Graph API,App-V,Microsoft Intune,Intune,Windows,Windows OS,patch management,Policy-as-Code,SCCM,ConfigMgr,Win32,Windows client,PowerShell scripts,PowerShell Scripting,PowerShell,troubleshoot,proactive,architecture,Automation,catalogs,cloud management,Group Policy,imaging,Microsoft certifications,SC-200,user experience

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact [e-mail].

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.