Workstation Systems Engineer III

Nesco Resource; New York (NY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Benefits package incl. MEC plan

Job summary

Nesco Resource is seeking an experienced Endpoint Infrastructure Engineer to support a large enterprise in the Tri-State area. You will own virtualization and endpoint management, with emphasis on Windows, MECM/SCCM, VMware/Omnissa Horizon, Citrix XenApp, and automation.

The role requires strong collaboration with security and IT teams, proactive problem solving, and thorough documentation. Hybrid work with most activity in New York, NY.

Qualifications

• 10+ years in enterprise infrastructure engineering or systems administration.
• Experience with on-premises and hybrid IT environments.
• Advanced knowledge of Windows 10/11 workstation operating systems.
• Hands-on experience with MECM/SCCM.
• PowerShell scripting and automation experience.
• Experience with VMware and/or Omnissa Horizon environments.
• Experience with Citrix XenApp or related Citrix technologies.
• Endpoint patching, vulnerability remediation, and security hardening.
• Strong Active Directory and Group Policy knowledge.
• Experience with software deployment and endpoint lifecycle management.
• Strong troubleshooting and problem-solving skills.
• Excellent written and verbal communication.

Responsibilities

• Provide operational support and security remediation for Citrix XenApp environments.
• Support and maintain VMware/Omnissa Horizon VDI infrastructure.
• Troubleshoot and resolve issues affecting virtual desktops.
• Support the Omnissa/Horizon imaging process, including image maintenance and deployment.
• Develop automation to streamline repetitive tasks using PowerShell, VMware PowerCLI, Excel/Power Query, and batch scripting.
• Develop, maintain, and deploy Active Directory GPOs.
• Collaborate with Security and Infrastructure teams to remediate vulnerabilities.
• Create and maintain documentation for procedures and support materials.

Skills

Windows 10/11

MECM/SCCM

PowerShell

Omnissa Horizon

Citrix XenApp

Patch management

Active Directory

Group Policy

Software deployment

Communication skills

Tools

Excel Power Query

Batch scripting

VMware PowerCLI

Job description

Endpoint Infrastructure Engineer - Virtualization & Endpoint Management

Location: New York

Work Arrangement: Hybrid - 3 days onsite per week

Position Overview

We are seeking a highly experienced Endpoint Infrastructure Engineer to join the User Infrastructure team supporting a large-scale enterprise environment in the Tri-State area.

This position is ideal for a senior infrastructure professional with strong expertise in Microsoft Windows, MECM/SCCM, VMware/Omnissa Horizon, Citrix, and PowerShell. The Engineer will be responsible for supporting virtualization and workstation infrastructure, performing security remediation and patch management, developing automation, and serving as a senior technical escalation point.

The successful candidate will be comfortable working independently as well as collaboratively with infrastructure, security, and support teams. Strong communication, problem-solving, and technical documentation skills are essential.

Key Responsibilities

Virtualization Infrastructure

• Provide operational support and security remediation for Citrix XenApp environments.
• Support and maintain VMware/Omnissa Horizon VDI infrastructure.
• Troubleshoot and resolve issues affecting virtual desktop environments.
• Support the Omnissa/Horizon imaging process, including image maintenance and deployment.
• Partner with infrastructure and support teams on virtualization-related projects and improvements.

Workstation & Endpoint Infrastructure

• Serve as a subject matter expert for Windows 10/11 workstation infrastructure.
• Manage Windows workstation security remediation and patching using MECM/SCCM and related technologies.
• Research, test, and deploy security updates and software packages.
• Identify and remediate software and hardware End-of-Life (EOL) issues.
• Perform patch management and vulnerability remediation across physical workstations and virtual desktops.
• Develop, maintain, and deploy Active Directory Group Policy Objects (GPOs).
• Troubleshoot complex endpoint infrastructure issues and serve as a point of escalation for IT Support.
• Develop automation to streamline repetitive administrative tasks using PowerShell, VMware PowerCLI, Excel/Power Query, and batch scripting.

Security, Compliance & Lifecycle Management

• Collaborate with Security and Infrastructure teams to identify, prioritize, and remediate vulnerabilities.
• Support endpoint security and compliance initiatives.
• Research emerging security risks and recommend appropriate remediation strategies.
• Research and remediate EOL hardware and software to reduce operational and security risks.
• Support IT audit activities by compiling and maintaining accurate technical documentation and evidence.

Collaboration & Documentation

• Work closely with Infrastructure, Security, IT Support, and other technology teams.
• Independently manage assigned projects and technical initiatives from planning through completion.
• Provide clear status updates to technical and non-technical stakeholders.
• Create and maintain high-quality technical documentation, procedures, and support materials.
• Translate complex technical issues into clear, understandable explanations for business stakeholders.

Required Qualifications

• 10+ years of experience in enterprise infrastructure engineering or systems administration.
• Strong experience supporting on-premises and hybrid IT environments.
• Advanced knowledge of Windows 10/11 workstation operating systems.
• Strong hands‑on experience with Microsoft MECM/SCCM.
• Strong PowerShell scripting and automation experience.
• Significant experience with VMware and/or Omnissa Horizon environments.
• Experience supporting Citrix XenApp or related Citrix technologies.
• Experience with endpoint patching, vulnerability remediation, and security hardening.
• Strong knowledge of Active Directory and Group Policy.
• Experience with software deployment and endpoint lifecycle management.
• Strong troubleshooting and problem-solving skills.
• Excellent written and verbal communication skills.

Preferred Technical Skills

• VMware vSphere / ESXi / vCenter
• Omnissa Horizon
• Omnissa/Horizon imaging and desktop pools
• Citrix XenApp
• Microsoft MECM/SCCM
• PowerShell
• VMware PowerCLI
• Active Directory / Group Policy
• Windows 10/11 security and patch management
• Vulnerability and security remediation
• Excel / Power Query
• Batch scripting
• Enterprise endpoint management

Ideal Candidate

The ideal candidate is a senior infrastructure engineer who can hit the ground running in a complex enterprise environment. You should be comfortable taking ownership of technical issues, working across multiple teams, managing competing priorities, and communicating effectively with both technical and business stakeholders.

Experience in financial services or another highly regulated enterprise environment is strongly preferred.

Why This Role?

This is an opportunity to play a key role in the stability, security, and modernization of enterprise endpoint and virtualization infrastructure. The Engineer will have significant responsibility across Windows, VMware/Omnissa Horizon, Citrix, MECM/SCCM, automation, patch management, and security remediation.

• PRO038

Nesco Resource offers a comprehensive benefits package for our associates, which includes a MEC (Minimum Essential Coverage) plan that encompasses Medical, Vision, Dental, 401K, and EAP (Employee Assistance Program) services.

Nesco Resource provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.