Staff Engineer 2 (Endpoint Engineering)

Insight Global; Phoenix (AZ); On-site; USD 120,000 - 150,000; Full time

Job summary

Insight Global is seeking an IT Staff Engineer 2 to join its Endpoint Engineering team in a senior, hands-on role focused on Azure Virtual Desktop and modern end-user computing.

You will lead from design through deployment, optimize secure endpoint services, and mentor other engineers while partnering with security and infrastructure teams on complex projects.

Qualifications

• 7+ years in Endpoint Engineering, End User Computing, or similar field.
• Advanced hands-on experience with Microsoft Azure Virtual Desktop.
• Experience with Nerdio, Intune, MECM/SCCM, Azure AD, and Group Policy.
• Strong scripting, automation, and repeatable workflows.
• Experience with audit support and regulatory environments is a plus.

Responsibilities

• Lead complex Endpoint Engineering and AVD initiatives from design to deployment.
• Engineer and optimize AVD environments including host pools and images.
• Manage Nerdio, Intune, MECM, and identity services for endpoints.
• Improve security, automation, monitoring, and operational standards.
• Support endpoint modernization, including Autopilot and lifecycle management.
• Provide Tier 3/4 escalation support for endpoint and AVD issues.
• Develop documentation, runbooks, and standard operating procedures.
• Collaborate with security, infra, desktop support, and business stakeholders.

Skills

Leadership

Communication

Documentation

Stakeholder management

PowerShell scripting

Automation

IT controls / audit support

Education

Bachelor's degree or equivalent

Tools

Azure Virtual Desktop

Nerdio

Intune

MECM/SCCM

Active Directory

Entra ID / Azure AD

Group Policy

PowerShell

IGEL/UMS

Autopilot

Job description

Job Description

As an IT Staff Engineer 2 within Endpoint Engineering, you will serve as a senior engineer focused on Azure Virtual Desktop, endpoint management, and modern end-user computing platforms. This role is responsible for engineering, supporting, and optimizing secure, reliable endpoint and virtual desktop solutions using AVD, Nerdio, Intune, MECM, Active Directory, Entra ID, Group Policy, and related technologies. This position provides advanced hands-on support for AVD operations, including host pools, session hosts, image management, FSLogix profiles, storage, performance, user experience, automation, and cost optimization. The role independently leads complex engineering work, mentors other engineers, supports audit and compliance requirements, and partners with cross-functional teams while escalating enterprise architecture decisions to Principal Engineers or leadership as appropriate.

Job Description

• Lead complex Endpoint Engineering and AVD initiatives with minimal supervision from design through deployment and operational support.


• Engineer, administer, troubleshoot, and optimize Azure Virtual Desktop environments, including host pools, session hosts, golden images, FSLogix, storage, performance, and user experience.


• Use Nerdio, Intune, MECM, Azure, Active Directory, Entra ID, and Group Policy to manage endpoint and virtual desktop platforms.


• Improve reliability, security, automation, monitoring, recovery procedures, and operational standards for AVD and endpoint services.


• Support endpoint modernization efforts including Intune, Autopilot, Windows lifecycle management, compliance baselines, application deployment, and cloud-managed endpoint capabilities.


• Provide advanced support for MECM/SCCM packaging, software deployment, patching coordination, endpoint configuration, and troubleshooting.


• Partner with security, infrastructure, desktop support, vendors, and business stakeholders to resolve complex endpoint, VDI, identity, and application delivery issues.


• Develop and maintain technical documentation, standards, runbooks, diagrams, scripts, and repeatable operational procedures.


• Evaluate solution designs, integrations, automation options, risks, costs, and long-term supportability.


• Mentor engineers and support teams by sharing technical knowledge and promoting consistent engineering practices.


• Provide Tier 3/Tier 4 escalation support for complex endpoint, AVD, application, identity, and user experience issues.


• Support risk management, regulatory compliance, change management, and protection of systems and data.


• Complete work in a timely and accurate manner while providing clear communication and strong customer service.


• The above job description is a summary of the job responsibilities and is not intended to be an all-inclusive list of duties and standards of the position. Incumbents will follow instructions and perform tasks and other duties as assigned by their manager.

Commitment

• Willingness to be an integral member of a successful team.


• Dedication to providing the highest levels of service.


• Excellent attendance and reliability.


• Adherence to company policies and procedures.


• Dedicated to maintaining confidentiality in every aspect of the job.


• Provide on-call support

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 7+ years of related experience in Endpoint Engineering, End User Computing, Infrastructure Engineering, Cloud Engineering, IT App Support, IT Development, IT Networking, or a similar technical field.


• Bachelor's degree in related field required or equivalent experience.


• Advanced hands-on experience with Microsoft Azure Virtual Desktop, including host pools, session hosts, image management, FSLogix, storage, monitoring, troubleshooting, and operational support.


• Advanced experience with Nerdio, Intune, MECM/SCCM, Azure, Windows endpoint configuration, application deployment, patching, compliance baselines, and endpoint lifecycle management.


• Advanced working knowledge of Active Directory, Entra ID/Azure AD, Group Policy, identity integration, access management, and related troubleshooting.


• Advanced experience with PowerShell scripting, automation, configuration management, endpoint remediation, and repeatable support workflows.


• Experience supporting secure and compliant endpoint environments, including IT controls, audit support, change management, security baselines, and regulated technology environments.


• Proven experience leading cross-functional technical workstreams and managing multiple complex initiatives.


• Advanced communication, troubleshooting, documentation, and stakeholder management skills.


• Ability to work collaboratively while providing technical leadership on complex Endpoint Engineering and AVD initiatives.


• Financial Services or Banking experience preferred.


• May require up to 25% travel.


• Experience with AVD cost optimization, autoscaling, capacity planning, storage migrations, and user-impact planning.


• Experience with Windows 11 lifecycle management, Autopilot, Intune compliance policies, and cloud-managed endpoint capabilities.


• Experience with IGEL/UMS, thin-client management, contractor endpoint access, and hardened endpoint configurations.


• Experience with TeamViewer, endpoint analytics, digital employee experience tools, or proactive remediation capabilities.


• Certifications such as AZ-900, Azure Administrator, Intune, MECM, PowerShell, or equivalent hands-on experience preferred.


• Additional related education and/or experience preferred.