own and modernize Synchrony’s global endpoint ecosystem across physical and virtual platforms
partner closely with Risk & Compliance to support audits, ensure configuration compliance, and remediate vulnerabilities
collaborate with Desktop Operations/ECC teams to enable scalable, reliable day-to-day delivery and support
Lead engineering design, development, standardization, and lifecycle management for Windows, macOS, and ChromeOS endpoints
Engineer and maintain enterprise OS images (Windows/macOS) and govern ChromeOS management and update strategy
Define and maintain hardware standards, perform OEM model testing, and manage drivers/BIOS/firmware update processes
Develop and optimize configuration baselines, performance settings, and endpoint hardening standards across platforms
Design and manage Intune policies for configuration, application deployment, compliance, and security baselines
Lead Windows Autopilot workflows including device registration, profile assignment, join models (Hybrid/Azure AD), validation, and reset/reprovisioning processes
Support SCCM infrastructure for co-management scenarios, packaging, patching, and deployment pipelines
Drive strategy/roadmap across endpoint tooling including Intune, SCCM, Ivanti, Tanium, JAMF, and Google Admin Console
Optimize performance, patching, and application compatibility for VDI/DaaS platforms (e.g., Citrix Cloud, AWS WorkSpaces, AppStream, Cloud PC)
Act as the Desktop Engineering POC for audit readiness, evidence collection, technical controls validation, and remediation tracking
Implement and maintain endpoint security controls (e.g., Defender, ASR rules, BitLocker), and align configurations with relevant regulatory expectations (e.g., SOX/PCI)
Manage macOS EFI/firmware/device password standards and coordinate JAMF integrations where required
Improve endpoint performance and user experience through Nexthink/telemetry insights and targeted remediation
Partner with Desktop Operations/ECC teams to transition engineered solutions into scalable production deployment and support
Lead root cause analysis for systemic endpoint issues and drive durable corrective actions
Evaluate new tools and modernization opportunities (e.g., Autopilot/Intune enhancements, Nexthink, Tanium, updated security baselines
Requirements
10 + years in Desktop Engineering, Modern Endpoint Management, or OS Platform Engineering or 12+ years of experience in lieu of a degree
Deep expertise in Windows 10/11 engineering (imaging, driver management, BIOS/firmware, GPO/Intune policy design)
Strong experience with Intune, Autopilot, compliance policies, conditional access, and Azure AD join models / co-management architecture
Proficiency in macOS engineering, including update governance, security controls, hardware baseline validation, and JAMF integration