Desktop Engineer

Sophisticated Work. In a Great City. Making a Difference.

The State of Wisconsin Investment Board (SWIB) manages more than $178 billion in assets, including those of the fully-funded Wisconsin Retirement System (WRS). SWIB operates at a level more often seen in top-tier global asset managers than in typical public pension funds. SWIB is a home for top talent. Approximately 61 percent of SWIB's investment professionals are Chartered Financial Analyst (CFA) charterholders.

The City of Madison, the state capitol and home of Wisconsin's flagship university, makes regular appearances on lists of best places to live, eat, and play. SWIB offers a modern workspace, hybrid work options, and competitive compensation and benefits.

Serving over 703,000 WRS beneficiaries, SWIB is driven by a clear mission: securing the financial future of those who serve Wisconsin. When you work at SWIB, you know your work matters.

Job Description:

About the Team

The Technology Support Team at SWIB designs, implements, and operates best-in-class systems and platforms that enable a broad range of investment portfolios and strategies. As a trusted advisor to the business, the team is valued for delivering innovative, reliable, and strategic technology solutions that drive SWIB's continued growth. We leverage technology to achieve enterprise goals, align IT initiatives with future direction, and operate in accordance with industry-leading standards. The Business Integration Team plays a key role in aligning people, processes, and platforms-supporting the transformation of SWIB's investment infrastructure.

Position Overview

The Desktop Engineer designs, implements, and supports enterprise end user computing technologies within a dynamic financial services organization.

This role is responsible for the engineering and operational support of desktop, laptop, mobile, Citrix/AVD, Microsoft 365, and collaboration environments. The successful candidate will have strong hands-on experience with endpoint management, application deployment, patching, automation, and ITIL-aligned service management practices.

We are seeking a technically proficient and customer-focused engineer who can independently solve complex problems, develop scalable solutions, automate operational processes, and serve as a senior technical resource for the support team. The ideal candidate brings experience supporting complex enterprise environments and is adept at bridging the gap between user needs, security requirements, and technical solutions.

Essential Activities

Endpoint Engineering and Management

• Design, configure, deploy, and maintain Windows and macOS endpoint environments.

• Manage endpoint provisioning, configuration, application deployment, patching, and security using tools such as Microsoft Intune, Ivanti Security Controls, and Jamf.

• Manage Windows and third-party application patching and endpoint protection.

• Support mobile device management for corporate-owned and BYOD iOS and Android devices.

• Develop and maintain workstation configuration and security standards, including Group Policy and modern device management policies.

• Develop PowerShell scripts and automation for endpoint configuration, application deployment, reporting, and operational processes.

Virtual Desktop Infrastructure

• Support and maintain Citrix, Azure Virtual Desktop, or similar virtual desktop technologies.

• Build and maintain golden images and provision persistent and non-persistent virtual desktops.

• Deploy, maintain, and troubleshoot applications within virtual desktop environments.

Microsoft 365 and Application Support

• Support Microsoft 365 services including licensing, Exchange Online, Teams, and related endpoint integrations.

• Support financial applications such as Charles River, Bloomberg, FactSet, and other trading and research tools.

• Collaborate with application owners and vendors to troubleshoot issues and coordinate application deployments and updates.

AV and Collaboration Tools

• Support conference room audiovisual systems, video conferencing platforms, Microsoft Teams Rooms, and collaboration technologies through internal and third-party resources.

• Troubleshoot AV and collaboration issues to ensure reliable meeting experiences for employees and executives.

Service Management & ITIL Framework

• Participate in ITIL-based incident, request, and change management processes.

• Develop formal change documentation including problem statements, implementation steps, validation, and rollback plans.

• Maintain technical documentation, operating procedures, and service ownership standards.

• Support hardware asset management and endpoint lifecycle processes.

• Identify opportunities for automation and continuous process improvement.

Customer Experience and Technical Leadership

• Serve as a senior escalation resource for complex endpoint, application, VDI, and collaboration issues.

• Mentor technical support staff on advanced troubleshooting, endpoint management, automation, and enterprise technologies.

• Partner with business and technology teams to understand requirements and develop appropriate technical solutions.

• Communicate complex technical issues clearly to both technical and non-technical stakeholders.

Vendor Management / IT Purchasing

• Work with software, hardware, and service vendors to resolve technical issues and ensure effective service delivery.

• Provide technical input into endpoint hardware standards, software licensing, technology lifecycle planning, and purchasing decisions.

Qualifications Include

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field; relevant industry certifications preferred.

• 5+ years of progressive experience in end user computing, desktop engineering, endpoint management, or enterprise infrastructure environments.

• Hands-on experience managing Windows and macOS endpoints using Microsoft Intune and related endpoint management technologies.

• Experience with application packaging, deployment, Windows and third-party patching, and endpoint security management.

• Strong PowerShell scripting and automation experience.

• Experience managing iOS and Android devices in corporate-owned and BYOD environments.

• Experience with Microsoft 365, including Exchange Online and Microsoft Teams.

• Experience with Citrix, Azure Virtual Desktop, or similar virtual desktop technologies, including persistent and non-persistent desktops.

• Strong knowledge of Active Directory, Entra ID, Group Policy, identity and access management, and MFA.

• Experience with ITIL-based service management, formal change management, and ITSM platforms such as Jira Service Management.

• Experience supporting Windows desktop and server operating systems and working knowledge of enterprise networking and WiFi.

• Experience supporting both on-premises and cloud-based enterprise technologies.

• Experience supporting financial services applications and environments preferred.

• Experience with Microsoft Teams Rooms and enterprise AV technologies preferred.

• Strong analytical, troubleshooting, documentation, and communication skills.

• Ability to independently manage multiple technical priorities in a fast-paced, high-stakes environment.

• Demonstrated ability to identify and implement automation and process improvements.

SWIB Offers:

• Competitive total cash compensation, based on AON (formerly McLagan) industry benchmarks
• Comprehensive benefits package
• Educational and training opportunities
• Tuition reimbursement
• Challenging work in a professional environment
• Hybrid work environment

The position requires U.S. work authorization.

Pursuant to our Hybrid Remote Work Policy, all staff have the flexibility to work remotely but are required to have a weekly presence in our offices, the frequency of which is dependent on their distance from office or the job position. Staff are not required to reside locally; however, we offer relocation reimbursement to the Dane County area per our policy.

All SWIB employees are subject to SWIB's Ethics Policy and Personal Trade Approvals Policy. These policies include restrictions on outside business activities and employment and have limits on personal trading. You may request copies of these policies from SWIB's talent acquisition team and any questions can be answered by SWIB's compliance team.